Account security is of the utmost importance to Blizzard Entertainment. We want to equip our players with the knowledge they need to ensure their accounts remain safe, secure, and in the right hands.
Within this guide, you will find information that will help you secure both your account and your computer, as account security and computer security often go hand in hand. We recommend that you review this guide completely and follow the helpful tips provided.
The links below provide further information on Account and Computer Security:
Computer Updates
Firewall Software
Antivirus Software and Anti-Spyware Software
Web Browsing Safety
Update Adobe Flash Player and Adobe Reader
Email Security
Battle.net Authenticators and Mobile Authenticators
The video below will provide you with some general tips for account security:
Computer Updates
If you are using Windows, please ensure that you have the most recent security and service packs installed. These security and service packs often include resolutions for security risks and updates for built-in security software (like the Windows XP firewall). You can access the most current updates at any time by visiting the Microsoft Windows Update page.
You can also turn on Automatic Updates by completing the following steps:
- Click Start, and then click Control Panel
- Depending on which Control Panel you use, Classic or Category, click on System and then on the Automatic Updates tab or click on Performance and Maintenance, System, and then on the Automatic Updates tab.
- Select the option you prefer and click OK. Make sure that Automatic Updates are not turned off.
If you are a Mac user, you can check for system and security updates and Apple security updates.
Firewall Software
Firewall Software is a security system which helps protect a computer or network of computers against external threats (like hackers) from another network (like the Internet). A firewall can prevent your computer from communicating directly with computers outside of your network and, similarly, prevent computers outside of your network from communicating directly with your computer.;
- Windows XP SP2 (included and enabled by default on all Windows XP systems updated to Service Pack 2)
- ZoneAlarm
- Sygate
While firewalls do provide added system security, they can affect connections to our game servers. Review our Advanced Networking Information page for suggested firewall settings.
Antivirus Software and Anti-Spyware Software
An important step in account and computer security is to ensure that no viruses, keyloggers, or Trojans are installed on your computer system. If these malicious programs are present, your account may be at risk of compromise.
Fortunately, there are many different types of software available to help you identify and remove such malicious programs from your computer system. Take time to review the following recommendations to determine what Internet security software may be best for you.
Note: Although we recommend Internet security software, we cannot directly support it. Please contact the distributor of the software for information and product support.Process Library
In order to determine if a virus, keylogger, or Trojan has infected your computer, it may be necessary to review the processes which are running on your computer.
Process Library.com provides a free tool that provides the latest information about spyware, adware, virus, Trojans, system processes, and other common applications. We highly suggest you use this program to gain a better understanding of what is currently running on your computer system.
Antivirus Software
Antivirus software is a type of program that scans a computer's memory and storage space to identify and eliminate viruses. We recommend that you install and then run more than one antivirus program while the World of Warcraft launcher is open, as some programs may be able to detect what another cannot. To avoid complications with the software, however, please do not run multiple antivirus programs simultaneously.
- AVG Free
- Kaspersky
- Malwarebytes Anti-Malware
- Moosoft
- NOD32
- Symantec Security Check
- Outpost Security Site PRO
- Trojan Remover
- Avast!
- Microsoft Security Essentials
- Norton Antivirus (Macintosh specific)
Anti-Spyware
Anti-Spyware software is a type of program that scans a computer's storage space and services to identify and eliminate programs designed to monitor computer usage beyond the user's acceptance. Spyware can cause crashing, minimizing of the game window, and connection issues. We recommend that you install and then run more than one anti-spyware program while the World of Warcraft launcher open, as some programs may be able to detect what another cannot. To avoid complications with the software, however, please do not run multiple anti-spyware programs simultaneously.
Web Browsing Safety
It's important to remain cautious of potential security risks even when browsing the Internet. These risks include, but are not limited to, malware (viruses, keyloggers, and Trojans) and phishing websites. Fortunately, by browsing safely and smartly, and with the help of some browser tools and complementing software, many of these risks can be greatly reduced.
Note: Although we may recommend specific web browsers or complementing software to assist with computer security, we cannot directly support either. Please contact the distributor of the web browser or software for information and product support.Web Browser Updates
Like operating systems and many software programs, web browsers will also issue periodic updates. These updates may offer new features (like a built-in phishing filter) or address previous security risks. To download the latest version of a new web browser or update your current web browser, please visit the distributor's main website. We've provided main page links for the most common web browsers below.
Phishing Filters
Phishing filters are a type of program that checks the websites a user may visit against a database of legitimate and phishing websites. These filters will then alert the user if the website is a known phishing website or poses a potential security risk.
Many of the latest versions of the more common web browsers have a phishing filter built in—Internet Explorer, FireFox, and Opera included. We encourage you to keep these filters enabled to ensure a more secure browsing experience.
For most web browsers with a built-in phishing filter, the filter will be enabled by default. If you have disabled your web browser's phishing filter or do not know if your phishing filter is enabled, please take some time to complete the following steps based on your web browser type.
For Internet Explorer 7
- Open Internet Explorer
- Click on the Tools button, click on Phishing Filter, and then click on Turn on Automatic Website Checking. (If the menu lists Turn off Automatic Website Checking instead, this means the phishing filter is already enabled)
- When the pop-up window appears, ensure that the Turn on Automatic Website Checking option is checked and click OK
For Internet Explorer 8 & 9:
- Open Internet Explorer
- Click on the Tools button, click on the Safety button, click on SmartScreen Filter, and then click on Turn on SmartScreen Filter. If the menu lists Turn off SmartScreen Filter instead, this means the filter is already enabled
- When the pop-up window appears, ensure that the Turn on SmartScreen Filter option is checked and click OK
For FireFox (version 2 and later):
- Open FireFox
- Click on Tools, click on Options, and then click on Security
- Ensure that Warn me when sites try to install add-ons, Block reported attack sites, and Block reported web forgeries are all checked
For Opera (version 9.1 and later):
- Open Opera
- Click on on Tools, click on Preferences, click on Advanced, and then click on Security
- Ensure that Enable Fraud Detection is checked
More information regarding built-in phishing filters may be found here:
- Internet Explorer Phishing Filter FAQ
- FireFox Phishing and Malware Protection
- Opera Fraud Protection
Update Adobe Flash Player and Adobe Reader
Adobe Flash Player is a plugin available for most web browsers and many mobile phones and electronic devices. This very common plugin allows users to access and view animated video content (including many banner-ads and other online advertisements).
Due to their popularity, Adobe Flash Player and Adobe Reader are frequent targets for malware. You can help protect your system by ensuring that you are using the most recent versions of these plugins and regularly check for any security updates. Be sure you have the latest version of Adobe Flash Player and the latest version of Adobe Reader installed on your system.
NoScript and Flashblock
FireFox users may also download and install NoScript and Flashblock.
NoScript is a free extension for FireFox and other Mozilla-based browsers that allows the user to restrict the execution of plugins (JavaScript, Java, Flash, etc) to a list of trusted websites. It also provides the strongest anti-XSS protection available in a web browser, allowing users to browse the Internet more safely. More information about NoScript may be found on the NoScript site.
Flashblock is another free extension for FireFox and other Mozilla-based browsers that blocks all Flash content (Macromedia Flash, Macromedia Shockwave, and Macromedia Authorware) from loading while active. Users may elect to download and then view the Flash content at any time by simply clicking on placeholder icons. More information about Flashblock may be found on the Flashblock site.
Email Security
Ensuring that your registered email address is secure is a very important part of account security. Your registered email address not only serves as a primary point of contact with Blizzard Entertainment, but it also functions as your Battle.net account name. We encourage you to review the security of your registered email address and take the appropriate steps to make it as secure as possible.
Create a Unique Email Address
The most direct way to increase the security of your registered email address is to ensure that it is unique to your Battle.net account. If your current email address is not unique to your Battle.net account, we strongly recommend that you take some time to set up a new one. Make sure the username and password for this new email address are exclusive; do not use a username and password that you've used online before.
Once registered, keep this email address as isolated as you can and do not associate it with any other service besides Battle.net. In addition to increasing the security of your account, this will also help reduce phishing emails sent to your Battle.net email address.
Maintain Secure Filters and Rules
Whether you're using an email address that is unique to Battle.net or one shared with other online services, it's important to periodically check your email's filters and rules.
The first thing to check for is the unauthorized set up of mail forwarding. Some malicious parties will attempt to compromise a registered email address and, if successful, enable this feature. Once set up and enabled, the mail forwarding feature will create a duplicate of every email sent to your registered email address and automatically forward it another email address. This means, for example, if Blizzard Entertainment sent you an email regarding a password reset or your Secret Question/Answer, it would be automatically forwarded to another location. To learn more about unauthorized mail forwarding and how to disable it, please visit our article Disabling Unauthorized Set-up of Mail Forwarding.
The second thing to check is the "whitelist" (or "safe senders list") for your email address. The "whitelist" is a list of contacts, managed by the user, from which email is authorized. Emails sent by any contact on this list will not be filtered to Spam, Junk, or Trash folders. Please ensure that both @blizzard.com and @battle.net are added to your email whitelist. For more information about this process, please visit our article on Setting Up Email Filters.
Battle.net Authenticators and Mobile Authenticators
The Battle.net Authenticator and Mobile Authenticator are two devices which offer an additional layer of account security. The Battle.net Authenticator is a physical token, small enough to fit on a key ring. The Mobile Authenticator is an application which can be downloaded (often for free) on many mobile phones.
These devices work by providing a secure authentication code upon command that will be unique to your Battle.net account. After an Authenticator is associated with your Battle.net account, the authentication code will be necessary for each client and Account Management log in, increasing your protection against standard compromise attacks.
Battle.net Authenticators are presently available for purchase on our Blizzard Store, and our Mobile Authenticator application can be downloaded here. More information about these devices may also be found in our Battle.net Authenticator FAQ.
Using a Battle.net Authenticator or the Mobile Authenticator application does not negate the importance of end-user system security. It is simply an added layer of protection and should complement (not replace) safe browsing habits and security practices.
