If you received a message saying Riot secured your account, we detected activity that strongly suggested somebody else may have gained access to it.

Rather than waiting for the compromise to be reported, Riot may take automatic action to limit further changes and help return the account to its owner.

What might Riot change?

The exact actions depend on what we detected. Riot may:

  • Reset your password.
  • Reverse certain account changes or purchases associated with the compromise.
  • Restore account information that appears to have been changed by the unauthorized user.
  • Require additional account recovery before you can access the account again.

If you receive an account security email, follow the instructions there first. You don’t need to contact Player Support simply because Riot took one of these actions.

What should I do next?

Following these steps is your best bet at securing your account, now and in the future.

1. Recover your account

Use the Recover & Secure Account option in the email you received.

If your password was reset, create a new password that you haven't used for another account or service.

2. Check your Riot account

Once you’re able to sign in again, review your account and make sure everything looks familiar, including:

  • Your email address
  • Linked accounts
  • Multi-Factor Authentication settings
  • Purchases or other account activity

If you still see something you don’t recognize, reach out to Player Support.

3. Enable Multi-Factor Authentication (MFA)

If you haven’t already, enable Multi-Factor Authentication on your Riot account.

MFA adds another verification step when somebody attempts to sign in and can help prevent unauthorized access.

For setup instructions, check our MFA How-To & FAQ.

4. Secure your email account

Your connected email is an important part of keeping your Riot account secure.

If you think somebody may also have access to your email:

  • Change your email password.
  • Use a password you don’t use anywhere else.
  • Enable MFA through your email provider.
  • Review your email account for activity or changes you don’t recognize.

You can find more account security recommendations in Protecting Your Account.

5. Check your device

If you aren’t sure how your account was compromised, run a full malware scan using your device’s security software or another trusted antivirus program.

What if I can’t recover my account?

Sometimes we can detect that an account has been compromised but can't safely return access automatically.

If the recovery option in your email doesn't work, use the Account Recovery Tool or submit an account recovery request to Player Support. You may be asked for information to verify that you're the account's original owner.

How is this different from an Unusual Login Activity notification?

An Unusual Login Activity notification means we detected a login from a device or location that may be unfamiliar and want you to confirm whether it was you.

If Riot tells you that your account was secured, we've already taken protective action because the activity gave us stronger reason to believe the account was compromised.

For more information about login alerts, check Unusual Login Activity.

How do I know the email is really from Riot?

Riot will never ask you to send us your password or authentication codes.

If you're unsure about an account security email, you can navigate directly to Riot Support or your Riot account instead of using links in the message.

If you're unsure whether an email is legitimate, check Emails from Riot Games for the list of domains Riot may contact you from.

If an email appears to be from Riot but doesn't come from one of the listed domains, don't open any links or attachments. Instead, contact Player Support directly.

Why does Riot do this automatically?

The sooner a compromised account is secured, the less opportunity an unauthorized person has to make additional changes, purchases, or otherwise misuse the account.

When we have enough confidence that an account has been compromised, automated remediation helps us limit that activity and start returning control to the account owner as quickly as possible.