Account Security

Most stolen accounts are not stolen by breaking anything. They are given away.

We will never ask for your password

Not in chat, not in a private message, not by email, not "to verify your account", not "to give you a shiny". Anybody who asks is trying to take your account, whatever their name looks like.

Staff never need your password. There is no situation where giving it to somebody helps you.

Use a password you use nowhere else

If a password you use here is one you also use elsewhere, a breach on that other site becomes a break-in here. A password manager solves this permanently; a memorable phrase of several words solves it well enough.

Do not share your account

Sharing it is against the Game Rules, and it is also how accounts get taken. "Let me borrow it for the gym" ends with somebody else's email on your account.

You are responsible for what happens on your account, including things somebody you trusted did.

Watch for fakes

• Check the address bar. A site that looks like this one on a different domain is a phishing page.
• We will not send you a link asking you to "confirm your password". Password reset emails only ever arrive because you asked for one.
• A trade that requires you to log in somewhere else is a scam.

If something goes wrong

Change your password immediately, then contact us through the contact form. Include your trainer name and roughly when you noticed.

If you cannot sign in at all, use the contact form anyway and describe the account — we would rather help you prove it is yours than let it go.