Riot Games account security
The steps that actually close the ways a Riot Games account gets taken — in the order worth doing them.
What an attacker gets with your Riot Games account
Has Riot Games itself been breached?
No. Riot Games does not appear anywhere in Have I Been Pwned’s catalogue of 1,027 known leaks.
That is about Riot Games the company. Your own email address can still be sitting in a leak from somewhere else entirely — a shop, a forum, an old account you have forgotten. That is the part worth checking, and it is free.
How Riot Games accounts are taken
- Free Rp Scams
- Elo Boosting Malware
- Fake Riot Support
Already lost the account? Start Riot Games account recovery → — go there first. Nothing on this page recovers an account that’s already gone.
The checklist
-
critical
Turn on two-factor sign-inRiot sends a code on sign-in from a new device once this is on.
-
high
Sign out of every sessionEnds anything still signed in that you did not start.
-
high
Verify the email on the accountAn unverified email cannot recover the account, and can be changed by whoever gets in first.
-
high
Check what your Riot ID revealsThe Riot ID travels across every Riot game and is visible to everyone you play with.
-
medium
Review linked game accountsOne Riot account can hold League, Valorant and the rest. Losing it loses all of them at once.
-
medium
Remove third-party tools you no longer useStat trackers and overlays hold access long after you stop opening them.
-
low
Expect fake tournament and beta invitesThe common Riot scam is an invite that asks you to sign in on a page that is not Riot.
What this guide can’t do
Every step above hardens the account from here on. None of them touch the data that has already leaked — the email, password and phone number sitting in someone else’s breach dump, which is where most Riot Games takeovers actually start. You can’t unleak a breach. You can find out what’s in there and take away what it’s worth.
Checks 13.1B+ leaked records. No card, no account to look.