PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchFirst check whether you use a Jagex Account or a legacy RuneScape account: their two-step setup and recovery instructions differ. Jagex Accounts require at least one two-step verification method and have email security codes enabled by default; you can add an authenticator app in account management. Legacy accounts can enable an authenticator directly in their account settings.
Identify your account type before changing authentication
A Jagex Account and a legacy RuneScape account do not use the same setup or recovery route. If you upgraded your character to a Jagex Account, follow the Jagex Account instructions below, not the legacy authenticator steps. Jagex’s separate guides are titled Two-step authentication | Jagex Account and Authentication | RuneScape Account.
As an Amazon Associate I earn from qualifying purchases.
Set up two-step verification on a Jagex Account
Jagex Accounts require at least one two-step option. Email security codes are enabled by default; adding an authenticator app gives you a code source separate from your inbox. Jagex says that enabling the app does not automatically disable email codes.
- Navigate directly to the official Jagex site and open Jagex Account management.
- Open Two-step Authentication, enable Security codes via authenticator app, and follow the on-screen prompts to connect your app.
- Save the backup codes somewhere secure and separate from the phone holding the authenticator. Never share them.
- Decide whether to keep email codes enabled. At least one two-step option must remain enabled.
- Secure the email account used for Jagex sign-in with a unique password and its own two-step protection.
Jagex says you can generate 10 backup codes. Each code works once; using one bypasses two-step authentication and grants full account access. Treat the codes like powerful recovery credentials. After using one, sign in and establish an authentication method you can access. Generating a replacement set disables all previously generated codes.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Set up an authenticator on a legacy RuneScape account
Jagex’s legacy instructions cover both RuneScape and Old School RuneScape accounts that have not been upgraded to a Jagex Account.
- Log in and open your account’s authenticator settings.
- Select Enable Authenticator.
- Scan the displayed QR code with an authenticator app. Jagex recommends Google Authenticator or Microsoft Authenticator in its legacy setup guide.
- Enter the six-digit code generated by the app to complete setup.
If a correctly entered code is rejected, check that the device and computer have matching time and time-zone settings.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Plan for a lost or replaced phone
Jagex Account
If your authenticator ecosystem syncs codes, installing its app on a new device and signing in to the same ecosystem account may restore them. If that is not available, use a saved Jagex Account backup code to sign in, then set up an authentication method available on the new device. If your backup codes were your only method and you have lost them, Jagex directs you to support.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Legacy account
Google or Microsoft authenticator users may be able to transfer their codes to another device. If you need to disable the authenticator, the process can depend on access to the registered email address. If you cannot access that email, Jagex says to submit an account recovery request first.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Do not begin by disabling the old authenticator if you have replaced your phone. First check whether its codes can be transferred or synced, and preserve a working way to sign in before removing an authentication method.
Protect the account beyond the authenticator
Two-step verification adds a barrier if someone learns your password, but it does not eliminate every way an attacker could gain or retain access. Jagex’s security guidance identifies risks including compromised email, phishing, malware, insecure authenticator backups, physical access to a device, and an existing session or linked third-party login.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- Use unique passwords. Use separate passwords for your Jagex Account and email. Jagex states that Jagex Account passwords can be 8–64 characters; a password manager is one way to manage unique passwords.
- Secure your inbox. Turn on two-step protection for email, and if you suspect compromise, check for unfamiliar forwarding rules or filters. Email access may let someone use sign-in codes or request password resets.
- Protect your devices. Keep your phone and computer secured and up to date. Jagex recommends device locks and regular antivirus or anti-spyware scans.
- Review linked sign-ins. Check linked Google, Apple, Steam, or other login methods and remove unfamiliar ones. Jagex warns that an unknown linked login may retain access even after you change your password.
- End suspicious sessions. If you have reason to think someone else is signed in, end active sessions as part of securing the account.
- Use a Bank PIN on a legacy account if appropriate. This is an additional barrier for in-game bank items, not a substitute for login authentication. Jagex says the PIN removal delay can be set to three or seven days.
- Avoid sign-in links in messages. Navigate directly to official Jagex account settings rather than trusting a link in an email, chat, or other message.
If you think someone has accessed your account
- Secure the email account associated with RuneScape and the devices you use to sign in.
- Change compromised account credentials and make sure the replacement password is unique.
- End active sessions and review linked third-party sign-ins; remove links you do not recognize.
- Follow Jagex’s account recovery guidance if you cannot regain control or suspect access remains.
A password change alone may not remove every route of access, such as an existing session or an unfamiliar linked login, so include those checks when responding to a suspected compromise.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
