Your LegendaMMO account is the key to both the website and the game: you log in to both with the same username and password. This page sums up what you can do to keep your account safe, and what to do if something looks suspicious.
The basics
- A strong, unique password. Passwords are 8–16 characters with both letters and numbers, no accented letters. Passwords that are too weak are rejected at registration and when changing your password. Use one you don't use anywhere else.
- Never share your password. The LegendaMMO team will never ask for it – not on Discord, not by email, not in the game. Anyone who poses as a GM and asks for your password is a scammer.
- Keep your delete code safe. The 7-digit code you set when registering confirms deleting a character in the game. Write it down somewhere safe and don't share it.
- A real email address. Account notifications and password recovery are sent there.
- Your account is yours. Accounts cannot be transferred, and buying or selling them is forbidden – see Rules.
The My Account page
After logging in, the website's My Account page offers:
- Change password – the new password works in the game immediately. Changing your password logs you out on every other device.
- Change email address.
- Security and logins – a list of your recent logins; logins from a new device are marked separately.
- Log out on all other devices – one click logs out every other device; you stay logged in on the one you are using.
If you see a suspicious login
- Change your password immediately on the My Account page.
- Press Log out on all other devices.
- Check that the email address on the account is yours.
- If you used the same password elsewhere, change it there too.
Forgotten password
Request a new password on the Forgot password page: we send a link to your account's email address, valid for 1 hour. While logged in, you can set a new password at any time on the My Account page.
Wrong passwords
Both the website and the game limit how many times in a row you can try a wrong password. After several failed attempts, logging in is temporarily locked – wait a little and try again. If it wasn't you trying, change your password.
Two-step sign-in
On the My Account page you can turn on two-step sign-in for the website: besides your password, we ask for the 6-digit code from the authenticator app on your phone (e.g. Google Authenticator, Microsoft Authenticator, Aegis, 2FAS).
- My Account → Turn on two-step sign-in.
- Scan the QR code with the app and enter the code.
- You get 10 backup codes – each works once, in case you lose your phone. Write them down somewhere safe: you only see them once.
You can turn it off with your password and a code.
Game logins and new device confirmation
- The Game logins part of the My Account page shows your last 10 logins to the game (with the network address partly hidden).
- When someone logs in to the game on your account from a new location, you get an e-mail.
- You can turn on new device confirmation: a login from a new location then only goes through after you approve it via the link in the e-mail – or on the My Account page while signed in. The link is valid for 24 hours. This needs a confirmed e-mail address.
- If it wasn't you, don't approve it, and change your password right away.
Anti-cheat
The game uses anti-cheat protection. Cheat and bot programs, macros and exploiting bugs are forbidden and lead to the account being banned – details: Rules.