Years of progress sit behind whatever account you linked on day one, usually without much thought. A short review is worth doing.
Link the account properly
Progress tied only to a single device is one lost phone away from gone. Use the official linking options in the game so the save exists somewhere you can recover it.
Protect the email first
Whatever address your game account is attached to is the real key. Two-factor authentication on the email protects the game account more effectively than anything you can do inside the game.
Never sign in through a third party
No legitimate tool, guide site or community service needs your game credentials. Any page that asks for them is either careless or hostile; in both cases the outcome for you is the same.
Be careful with account trading
Buying or selling accounts is both against the terms of most games and a common scam pattern, because the original owner usually retains recovery access.
Review what you installed
If you have experimented with unofficial clients or tools, remove them, reinstall the official version, and change the password on the linked email.
Report rather than retaliate
If you encounter an obviously manipulated opponent, use the official reporting channel. Matching their approach only puts your own account at risk.
Related CSR2MODX reading: CSR2 mods explained · Fair play and account security · Resources
- safety
