Account Security Tips
Your account security is very important. Thus, we want to give you useful information that will help you ensure that your account, characters, and valuable in-game items are safe. We recommend that everyone visit this page and follow the helpful tips to ensure that their computers and accounts remain secure.

Major causes of account security problems are:

• Sharing account information.
• Keyloggers

GIVING OUT ACCOUNT INFORMATION -- TO *ANYONE*

Sadly, our Support Team receive a considerable number of inquiries from people who have lost their account because they shared their password to a friend, spouse (or ex-spouse), spouse (in-game), roommate, relative, etc, at one time and then had their account stolen, items sold, and characters deleted by that individual.

Most of the small-scale account thefts (those not done by a widespread hack or scam) take place because the individual gives out their own information to someone they believed they could trust.

This is not to say players should distrust their friends, but your password should be yours and YOURS alone... this is part of why our Terms of Use specifically forbid sharing your login information.

KEYLOGGERS

Keyloggers are computer softwares specialized to record your keystrokes. It can record anything that you type, including your passwords, emails, credit card number. They save the recorded keystrokes into a log file or send them to another machine.

How do I keep my account secure from hackers?

• NEVER tell anyone your OverSoul User ID, Password and Secret Answer -- not even your closest friend or the Game Moderators. If you manage to let it slip, change it.
• Avoid the use or allow other players to “pilot” your account.
• Don’t use the same password for multiple accounts.
• Don’t use common words found in a dictionary. Don’t use anything easy to guess such as your name or your pet’s name. People who learn about you can use this in their guesswork.
• Make your password at least 9 (preferably 14) characters long and use both letters and numbers. This will make your password virtually impossible to guess or to crack with “brute force” as it would takes years for a potential account thief to try all the possible combinations.
• Make sure your email password is different from and as secure as your OverSoul password. If someone gains access to your email account, they can then easily get your OverSoul password.
• Remember to keep the email address on your account up-to-date and personal. Free sites such as Hotmail and Yahoo will delete inactive accounts after a time. If a “hacker” catches wind of this, all they need to do is register the same name at the email website, and presto, one click on forgot password and your account is theirs.
• If you are using a public or shared computer, remember to log out of your account completely if you have to step away from the computer.
• Make your secret question something only you would know. The secret question and answer can be used to retrieve your password.
• Don't write your name and password on a piece of paper. It can get lost or fall into the wrong hands. As much as possible, memorize your login name and password.

What are the risks of having an unsecured account?

A lot of things can happen to an unsecured account. Here is a list of some of the possibilities:

• The character can get into a fight because of the pilot’s attitude towards other players or the Game Moderators.
• Account can be used to go on a killing rampage. Then get suspended because of it.
• The account can be used to scam another player of a trade.
• It can be used to hack another player’s account.

The worst case however is to have it hacked. Hacking can come in many forms. The most common is to have the account cleaned of all its items. However, in some cases, the items are left intact but the characters deleted. Other times, the account is also used to ruin the real owner’s integrity and reputation in the game.

What do I do if my account has been hacked?

The first thing to remember is not to panic. If someone has gotten into your account, you can probably regain control on your own. If the account thief has not changed the password or email address on your account, log in and change the password quickly. You should then log out and log back in with the new password. If they have changed the password, but not the email address, you can request a lost password and it will be sent to your email address. Then log in and change the password. If the thief has changed both the password and the email, you can use your secret question to have a new password sent to your email address. If you cannot get into your account using any of the above methods, you can file a hacking ticket to the Support Team by use of your own Helpdesk Account.

Note: If you can no longer remember the answer to the secret question, send a request through your own Helpdesk Account.

True hacking is very rare. Many people experience bugs or other routine problems and quickly assume they were hacked. If you simply can’t log in, do not jump to the conclusion that you were hacked. There are many possible causes of login problems. The only real proof that you were hacked is if someone edits your profile and/or takes all your in-game items.

Note: Please refer to the Account Security Policy for the process on how to file a hacking report.

What will the Support Team do to respond to the hack reports that are submitted to them?

The first thing the Support Team does when a hacking case is filed is to check if the items are still present in the account’s warehouse and inventory. If it’s intact, the Support Team will issue a new password for the account - IF the ownership had been properly verified. However, in the event that all the items were taken, the Support Team will generate a report of all its transactions since the incident to track down these missing items. Once the investigation had been concluded (items traced, offending parties identified, IP address logged, etc.), an email will be sent to all the accounts who have either been the direct recipient of these items together with a suspension to ensure that the items will no longer leave the account. After which, a schedule will be set for the restoration of the account’s items. Restoration will be done 7 days after filing or more because we are giving the suspended accounts time to give their explanation as to how the items came to their possession. What will happen if one was caught to have hacked another player’s account?

As stated in the Rules and Policies of the game, all accounts found to have hacked another will be SUSPENDED FOR 30 DAYS, and all ITEMS in that account will be WIPED-OUT (except 1 weapon, 1 armor set and 100k gold only) and HACKED ITEMS WILL BE CONFISCATED. If the account is found to be involved in hacking for the second time, the ACCOUNT WILL BE PERMANENTLY DEACTIVATED.

What happens to the accounts found to possess the hacked items?

During the course of the investigation, all items taken from the hacked account will be tracked down by the Support Team from the owner down to the account who currently has it in its possession. In hacking cases, the last holder of the items will be suspended together with direct recipients. This is to ensure that the items will no longer be traded to others.

An email will be sent to all suspended accounts to request for an explanation. IF the account is cleared of any involvement to the hacking case, the hacked item will be confiscated and the account will be reactivated.

Note: Be advised that the Support Team will no longer compensate the player should they receive a hacked item through PHP and/or one-way trades.

What if one unknowingly acquires a hacked item through a legal transaction (in game two-way trade)?

If the hacked item was obtained through a legal transaction, the account will be suspended only temporarily while the Support Team retrieves the hacked items to return to the rightful owner. Since the items were acquired legally, the Support Team will replace the compromised items that were retrieved from his account.

Note: Legal transactions are two-way exchanges in-game wherein another item of the same value or its mint equivalent were traded for another in-game item to mint OR item to mint exchanges for PHP, OS Load, and other out-of-game items are not considered legal trades.