Battle.net account security
The steps that actually close the ways a Battle.net account gets taken — in the order worth doing them.
What an attacker gets with your Battle.net account
Has Battle.net itself been breached?
No. Battle.net does not appear anywhere in Have I Been Pwned’s catalogue of 1,027 known leaks.
That is about Battle.net the company. Your own email address can still be sitting in a leak from somewhere else entirely — a shop, a forum, an old account you have forgotten. That is the part worth checking, and it is free.
How Battle.net accounts are taken
- Gold Selling
- Fake Blizzard Emails
- Boost Scams
Already lost the account? Start Battle.net account recovery → — go there first. Nothing on this page recovers an account that’s already gone.
The checklist
-
critical
Add the Battle.net AuthenticatorThe phone authenticator is stronger than email codes and takes a minute to attach.
-
high
Turn on SMS ProtectLets you undo a password change and recover the account by text if you are locked out.
-
high
Keep the account email privateThe Battle.net email is the reset route and is often the one leaked in old breaches.
-
medium
Check what your BattleTag showsBattleTags are visible to everyone you play with and follow you across every Blizzard game.
-
medium
Review connected accountsConsole and social links are separate ways into the same account.
-
medium
Use parental controls for a child accountCovers play time, spending and who can contact them.
-
low
Distrust in-game whispers with linksFake gold-selling and beta-invite whispers are the usual route to a fake login page.
What this guide can’t do
Every step above hardens the account from here on. None of them touch the data that has already leaked — the email, password and phone number sitting in someone else’s breach dump, which is where most Battle.net takeovers actually start. You can’t unleak a breach. You can find out what’s in there and take away what it’s worth.
Checks 13.1B+ leaked records. No card, no account to look.