We do our best to make Roblox is a safe and fun place for everyone. As an important reminder, you are one of the best defenses your account has against scammers and thieves! Be cautious, be safe, and review the helpful information below to learn how you can help keep your account safe from any would-be thieves. 

Note: If your account has already been taken, visit our account recovery steps.

How to keep your account safe

• Add an email address to your account

  It is always a great idea to add an email address to your account! The benefits of adding an email address to your account includes resetting your password if you forget your password, keeping your account protected using the 2-Step Verification (2SV) feature, and easier for us to help you when you contact us. 

• Never Share Your Password or Cookies, 2SV Codes, or Backup Codes

  The most common way players lose their account is by sharing their login information directly with others or by filling out online surveys. If anyone asks for your login information, do not give it to them and be sure to report them to our moderators using the Report Abuse feature.

  Never give out your password, browser cookies, 2SV security codes, backup codes, personal details, or sensitive computer information either. Also keep in mind that Roblox employees will never ask you for any of this information.

  If someone tells you they know this awesome trick or hack and just need some particular information from you to get it to work, they are just trying to steal your account. One common trick is claims of getting a sweet prize or free Robux in exchange for account details. Any officially supported Roblox promotions will be announced through the blog, Notifications tab of your Messages section, or through a banner on the top of the site.

• Enable 2-Step Verification (2SV)

  This feature makes it so no one else can login to the account even if they know the password. There are different 2SV options you can use: Authenticator App, Email, or Security Keys. We recommend the Authenticator App option. See our Add 2-step Verification to Your Account article for information on how to enable the feature.

• Always Log Out of Your Account When You're Done Playing

  If you leave your account logged in on a computer, anyone else can use that computer and have access to your account. It’s important you always log out after playing, especially when using a shared computer such as at school or friend's house.

• Make Your Password Unique

  You should have a different password for every online account you have. Don't re-use a password you used on another account. Also, make your passwords hard to guess. Common passwords such as pass123 or using part of your username as a password are easy to guess.

• Never Add Someone Else’s Email Address on Your Account

  The only email address you should have verified under your account page is your own or a parent's. If you put someone else’s email address there, then they will receive the password reset emails and can then gain access to your account and lock you out of it.

• Learn to Recognize Scam and Phishing Sites

  As a general rule of thumb, you should NEVER click on any links to sites you do not know. The only links allowed on Roblox are links to other pages from roblox.com or those specified in the Roblox Community Standards. Any link that contains spaces or unusual characters, or is to a site you are not familiar with should not be trusted, even if you know the user who sends it to you.

  Messages like these are scams:

  • f*ree*.ro*b*ux.o*mg.c*om (just remove the * and go there and get free robux + membership + cheats!)
  • Your information is going to be leaked, you can see it all here. www.scamsite. com, just remove the space between . and com

These sites are made to steal a player's username and/or password. This can also result in the loss of Robux or items from your account. 

• Don't Get Tricked by In-experience Forms

  Only enter your login information when logging in through the official roblox.com website or on the login screen of the official Roblox apps. If an experience asks for this information for any reason at all, even if it looks like an official Roblox request, leave the experience and use the Report Abuse link located on the experience's details page.

• Get Parent Permission Before Downloading Programs

  There are bad programs out there called malware and keyloggers. Never download or run a program (.exe file) without your parent's permission. Any program you download should be from a trusted company source. Malware programs can collect your personal information such as passwords. We also recommend checking and removing browser extensions.
  
   

  Beware of browser extensions: Roblox does NOT create browser extensions. There are no official Roblox browser extensions available for use. If you choose to use browser extensions published by 3rd party developers, we recommend you follow the guidelines below:
  
   

  • Only download extensions through a known platform such as the Safari Extensions, Firefox Extensions, or the Google Chrome Store
  • Avoid browser extensions that not many people have installed or that do not have reviews. Read the reviews to learn about issues after installation
  • Carefully read the permissions that the extension requires, and do not provide or allow access to personal information, email address, or other data
  • When in doubt do not download the extension as it may compromise your Roblox account and expose you to other security risks

• Never screen share your account information: 

  Do not share your screen or images of your screen while accessing account information (e.g. DOB, PIN, etc.) or logging in. You may be sharing your login information which may lead you to lose access to your account. Roblox employees will never ask for your login information. Be sure to report all such attempts using the Report Abuse feature if someone suggests it on Roblox.

Parents, learn more about how we keep kids safe and our parental controls with our Parents Guide.