Recommended Free Tools
The strongest protection for an Old School RuneScape account is layered account security: move a legacy character to a Jagex Account, use a unique password, secure the email address used to sign in, enable two-step authentication, protect the backup codes, and remove unfamiliar linked logins. Those measures can prevent or contain an account takeover.
They cannot undo a server-side rollback. A rollback changes game data on Jagex’s servers, while a hacked account changes who can access the character. Use the recovery route that matches the problem, and treat any progress-restoration decision as incident-specific rather than something a password reset or local backup can perform.
As an Amazon Associate I earn from qualifying purchases.
Account theft and a rollback are different problems
Start by identifying what actually changed. If another person can sign in, has altered your email or authenticator, or has moved items, you have an access and ownership emergency. If your credentials still work but a character, bank, quest state, experience total, or other server-held data has reverted, that is a possible rollback. The controls and remedies are different.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →| Problem | What is affected | Useful action | What the action cannot do |
|---|---|---|---|
| Account takeover | Sign-in access, linked logins, email, authenticator, sessions, or character control | Secure the email and device, end sessions, remove unknown linked accounts, change credentials, and use the correct Jagex recovery route | It does not restore game data that Jagex’s servers have rolled back |
| Server-side rollback | Character state stored by the game service at a particular point in time | Record the incident, check Jagex’s current official announcements, and contact official support if instructed | Passwords, backup codes, account-recovery appeals, local files, and security software cannot directly rewrite server state |
Jagex’s security pages explain how to protect access and recover credentials. They do not establish a general player-controlled process for restoring progress lost in every rollback. Do not promise yourself that better security, a purchase, or an appeal will reverse a server event.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Identify whether the character uses a Jagex Account or a legacy account
The first decision determines which sign-in and recovery instructions apply. Jagex recommends upgrading legacy RuneScape accounts to a Jagex Account for its additional security features; its security guidance says, “The best recommendation we can make to any player who is concerned about account security is to upgrade to a Jagex account.” Read the Jagex Account security tips before attempting recovery.
| Account type | How to recognize the relevant route | Use these instructions |
|---|---|---|
| Jagex Account | You sign in through Jagex Account account-management and authentication settings, with email codes, an authenticator, or backup codes | Jagex Account security tips and Jagex Account two-step authentication |
| Legacy RuneScape account | You still use the older RuneScape account sign-in and have not upgraded the character to a Jagex Account | Legacy account security tips, legacy authentication instructions, and, when reset fails, the legacy recovery appeal |
Do not send an upgraded account through legacy recovery just because the character originally began as a legacy account. Confirm the current account type first.
Harden a Jagex Account before anything goes wrong
1. Secure the email account first
The email address used for Jagex Account sign-in is part of the account’s security perimeter. Give that mailbox a unique password, enable whatever two-step protection its provider offers, review recovery addresses and phone numbers, and remove unfamiliar sessions or forwarding rules. If an attacker controls the mailbox, they may be able to intercept sign-in or recovery messages even after you change a RuneScape password.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
2. Use a unique password of an appropriate length
Jagex’s Jagex Account guidance describes passwords from 8 to 64 characters. Choose a password that is not used anywhere else, and do not reuse an old RuneScape password after a breach. A password manager can generate and store a different random password for the Jagex Account and for the associated email account. Never send the password to another person claiming to be support.
3. Add an authenticator and protect the recovery codes
An authenticator app supplies an additional login factor. Jagex Accounts can also use email codes, with an authenticator available as an option; the exact choices are described in the two-step authentication guide.
When you generate backup codes, Jagex provides 10. Each code works once, bypasses two-step authentication, and grants full account access. Treat every code like a spare account key: do not photograph it to a shared cloud album, paste it into chat, or give it to someone offering “verification.” Store it privately and separately from the phone or computer running the authenticator. If one code is used, set up another authentication method. Replacing the set invalidates the previous codes, so update your stored copy immediately.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
4. Audit linked third-party logins
Open the account-management area and inspect every Google, Steam, or other linked sign-in. Remove anything you do not recognize. Jagex warns that a hijacker can link a third-party login and retain access even after you change the Jagex password. Its warning is explicit: “If someone hijacks your RuneScape character, they can link their own third party login (such as through their Google or Steam account) and access your account even if you change your password.” This is a reason to check linked accounts during every suspected compromise, not evidence that every takeover uses that method.
5. End sessions after suspected compromise
If you believe someone has accessed the account, use the available account-management control to end active sessions, then remove unknown linked logins. Perform those steps after securing the email and the device you will use for the reset. Otherwise an attacker who is still signed in may immediately undo your changes.
6. Treat phishing and malware as account risks
Jagex identifies phishing, reused passwords, compromised email, and malware as possible routes to account compromise. Type the support address yourself or use a saved official bookmark rather than following an unsolicited “appeal,” “giveaway,” or “security check” link. Keep the operating system, browser, and security software updated; remove suspicious extensions and run a malware check if the device behaved unexpectedly. Security software reduces risk but does not recover a character after a server rollback.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Legacy-account protection and authentication
For a character that has not been upgraded, follow the separate RuneScape Account security tips. Use a unique password, secure the email attached to the account, enable the available authenticator protection, and watch for phishing. The legacy authentication article covers Old School RuneScape and tells upgraded users to use the Jagex Account instructions instead.
When a password reset fails because the email was changed, is inaccessible, or another listed access problem prevents the reset, use Jagex’s recovery appeal. Enter the login name or login email requested by the form, not the in-game display name, and provide as much ownership information as you can remember. Jagex says an outcome email should arrive within 24 hours, although that message is an assessment of the appeal rather than a promise that every appeal succeeds.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What to do immediately if the OSRS account was hacked
Work in this order. It limits the attacker’s remaining paths and leaves a clearer record for support.
- Stop using a possibly infected device for sensitive changes. If you saw unknown software, browser extensions, or remote-control activity, use a known-clean device where possible. Update the original device and check it for malware before signing in again.
- Secure the email account. Change its password to a unique value, enable its available two-step protection, check recovery details and forwarding rules, and end unfamiliar sessions.
- Confirm the account type. Use the Jagex Account flow if the character is upgraded; use legacy instructions only for a legacy character.
- End active sessions and remove unknown linked logins. A password change alone may leave a linked Google, Steam, or other login usable.
- Change the Jagex or legacy password. Use a new password that has never appeared on another service. Do not reuse the compromised email password.
- Restore two-step protection. Re-enrol the authenticator if needed, generate a fresh set of backup codes, and store them away from the authenticator device. If a backup code was used, replace the set.
- Document what happened. Note approximate times, changed contact details, unfamiliar linked accounts, missing items, and the last state you recognize. Keep screenshots and support emails; do not publish backup codes or passwords.
- Use official support if access remains blocked. For a Jagex Account, follow its authentication and backup-code recovery flow. For a legacy account whose reset fails, submit the recovery appeal with the requested ownership details.
Recovery route by the access you lost
| What is missing | Best next step | Important limitation |
|---|---|---|
| You forgot the Jagex Account password but still control the email | Use the Jagex Account sign-in reset, then review sessions and linked accounts | A reset does not remove an attacker’s linked third-party login by itself |
| You lost the authenticator but have an unused backup code | Use one backup code to enter, then add another authentication method and generate a replacement set | Each backup code is single-use and gives full access; keep the remaining codes private |
| You lost the authenticator and have no backup code | Follow Jagex Account’s authentication recovery instructions and prove control of the account through the official flow | Do not invent a legacy appeal path for an upgraded account |
| The legacy account’s reset email is inaccessible or was changed | Submit the legacy recovery appeal using the login name or login email and detailed ownership information | The in-game display name is not the requested login identifier; an outcome email is stated to arrive within 24 hours |
| A strange Google, Steam, or other login remains connected | Secure the email and device, end sessions, remove the unfamiliar link, and then change passwords | Changing only the main password may leave that linked login active |
| The account signs in normally but game progress reverted | Treat it as a possible server incident: record the details, check current official Jagex announcements, and contact official support if appropriate | Credential recovery does not establish a method for restoring server-held game state |
Can you get progress back after an OSRS rollback?
There is no general player-side restoration procedure established by the Jagex security and recovery pages linked above. Those pages explain access protection, authentication, and ownership recovery; they do not say that a player can upload a backup, edit a character, or force a rollback reversal. A local screenshot, save file, account-recovery form, or security product cannot rewrite the authoritative game state on Jagex’s servers.
For a suspected rollback, first make sure the issue is not an account takeover. If the email, password, authenticator, or linked logins changed, follow the compromise procedure. If credentials remain secure and multiple characters or systems appear to have reverted around the same time, gather a concise incident record:
- Character name and account type (Jagex Account or legacy).
- World, game mode, and the approximate time you last saw the expected progress.
- The specific quest, experience, items, or bank state that changed.
- Any in-game or launcher error and the time it appeared.
- Evidence that your sign-in, email, authenticator, and linked accounts remain under your control.
Check Jagex’s current official incident announcements before submitting several unrelated forms. If an announcement gives a support route, use that route and describe the event as a possible rollback rather than claiming the account was hacked when you have no evidence of unauthorized access. Because restoration policy can vary by incident, only a current Jagex announcement or support reply can establish whether affected progress will be restored.
Free tools Windows power users keep installed
One-click scans. No signup required.
A maintenance checklist that prevents avoidable losses
When you create or upgrade the account
- Confirm whether the character is legacy or on a Jagex Account.
- Use a unique 8-to-64-character password for a Jagex Account and a different password for the email account.
- Enable email two-step protection and an authenticator where supported.
- Generate the 10 Jagex Account backup codes and store them privately away from the authenticator device.
- Review every linked third-party login and remove anything unfamiliar.
After a device change or travel
- Install the authenticator only from the device platform’s legitimate store.
- Verify that you can locate your backup codes without placing them in a shared note or chat.
- Check active sessions and linked logins after using a public or borrowed computer.
- Sign out of browsers and launchers you no longer control.
At the first sign of compromise
- Secure the email and device before changing the game password.
- End sessions and remove unknown linked accounts.
- Replace the backup-code set if any code may have been exposed or used.
- Record times and changes for the official support form.
- Do not pay a stranger for “recovery,” disclose a backup code, or install remote-access software at another person’s request.
The practical bottom line
Upgrade a legacy character when possible, secure both the Jagex login and its email, use a unique password, enable an authenticator, protect the 10 one-use backup codes, and audit linked logins and sessions. Those steps address account takeover. A rollback is a separate server event: document it, consult the current official incident information, and ask official support what that particular incident allows. No account-security setting should be described as a guaranteed way to restore rolled-back progress.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
