Boards›Report a Bug

HUGE security flaw

caseybot·11/13/2019, 10:25:17 PM·29 votes·11,963 views

So ever since the new launcher came out I have been quite a fan of it. However, that all changed when someone got access to my account. I'm not exactly sure how they did it but they managed to play multiple games on my account. Once I figured this out I changed my password immediately. I thought the problem was over and I didn't have to worry anymore. I quickly found out I was wrong. When I launched the game to enter my new password, It immediately sent me to the home screen. I thought it was a little odd at first so I waited to see if the password hadn't been updated yet. After hours of waiting it still just let me log in automatically without having to enter the new password. I changed my password again to see if it fixed it and once again, it did not ask me to enter my new password. The person who originally took of my account still has access and is still playing games and I have no way to get them off my account. I have emailed riot support however they seemed to ignore it and just prompt another password change. This is a huge security flaw and needs to be addressed immediately.

20 Comments

Silent Pace11/14/2019, 5:07:45 AM6 votes

You might want to try enabling two factor authentication. You will then be able to remove the player that's using your account from a trusted accounts list. https://support.riotgames.com/hc/en-us/articles/360010367273-Two-factor-authentication-FAQ I'm not sure if this will solve the problem but I hope it does.

Lordofthepittt11/14/2019, 12:36:42 AM2 votes

At least you still have your account. My friend lost his account because someone jacked it, hacked a bit and then Riot auto banned it, and refused to listen to him when he tried to get the account back and explained the situation.

To be honest Riot is really really good at security and intelligent bans.

MagicFlyingLlama11/13/2019, 10:39:12 PM2 votes

Check your email account for any odd activity and reset the password on that.

SpookyNeedle11/14/2019, 2:52:05 AM1 votes

When you exit the client you gotta click the Sign Out button and then when prompted to login at launch make sure you don’t have “Remember me” on. If that doesn’t fix it idk

Trias00011/14/2019, 7:00:41 PM1 votes

Riot, what the actual fuck? This is probably the dumbest of your dumb mistakes. And there's been plenty. https://i.memeful.com/media/post/QRyv0dv_700wa_0.gif

Diopsideˆ11/15/2019, 8:41:13 AM1 votes

When 2FA coming to League, when Riot?

XJ9999999999999911/15/2019, 6:19:59 PM1 votes

small indie company.

prob gonna take 3-4 years just like the ability to change email/pass without going to the actual email, lmao.