Password

A Password is a set of characters which is used to gain access to an account. It is recommended to change your password every 1 to 3 months to ensure that your account stays secure. Never tell anyone the password of your account as it will compromise the security of your account. Jagex Moderators will never ask for your password. Anyone that attempts to ask for your password should immediately be reported for scamming. There is a system that prevents any IP address from accessing any Old School RuneScape account if five or more incorrect passwords are tried in succession. This is to prevent would-be hijackers from gaining unauthorised access to your account.

Password creation advice

An Old School RuneScape password can be anywhere from 5-20 characters, and is not case sensitive. Currently there is no support for special characters. It is recommended to choose a password that is closer to the maximum length. To improve on overall password security, one can use a unique password for each account, as reusing passwords can pose a risk when the password is breached. The password should ideally have a mix of letters and numbers, should not contain personal information or common words.

General password security

• DO NOT pick any word or number which has a connection to you, so don't pick your favourite animal or your house number.
• DO NOT use your phone number or any personal information as your password. This can be easily guessed by a friend or relative.
• DO NOT just use a number at the end of a word, such as apple1.
• DO NOT use common number and letter substitutions e.g. 4 as the word 'for', 1 as 'L' or 'I', 5 as 'S'
• DO NOT use repeating characters 'bbbbbbbbbb' or series of characters such as 'kbkbkbkbkbkb' or also something like 'rs2rs2rs2rs2'.
• DO NOT use your real name, account name or name of an item either forwards, backwards or divided up.
• DO NOT use a series of characters off any keyboard such as 'adfsghd', 'lkjhgf' or 'qazwsxedc', as these are very common and hijackers will look for these.
• DO NOT fall for users saying that the system will censor your password.
• DO NOT give your password to anyone. This includes any friends, relatives, or other players.
• DO NOT use a password that you've previously used on your account.
• DO NOT combine your Old School RuneScape password with other things such as your email account. If the password for one is discovered, access to your Old School RuneScape account becomes much easier for hijackers.
• DO NOT use your Old School RuneScape password a second time for an account on another website, or for secondary Old School RuneScape account.
• Be careful about keeping your Old School RuneScape password in places where it may be accidentally discovered, like in a Microsoft Word document.
• Passwords should not be entered if there is someone directly behind you.
• Passwords should never be entered on any website besides runescape.com. Many non-legitimate websites have keyloggers, which record and steal players' passwords. The same rule applies to Old School RuneScape fansites as well - including the Old School RuneScape Wiki. The cheats and scams page can teach you many common scams to be aware of.

The cheats and scams page can teach you many common scams to be aware of.

Changing your password

Prompt screen for password changes

To change your password, log into the Old School RuneScape website from the button at the top-right of the home page, and click "My Account". Once you log into your account settings, click on "Change Password". It will bring you to a screen prompting you to send a link to your registered email. Check your email for a link to to enter your new password.

If you have forgotten your password entirely, you can click on the "Can't log in?" button from within the Old School RuneScape client and request for a password reset to be sent to your registered email address after entering your login. Otherwise, use the Reset Password support page on the Old School RuneScape website.

It is strongly advised to run virus scan software prior to changing or resetting your password if you suspect your computer might be infected by a keylogger or you have any other security concerns, or use a different computer of which you know it is secure. You run the risk of losing access to your account from a hijacker if you don't run a virus scan.