Security guide Introduction . Whilst the WoW game itself is relatively safe , there are several things you can do to protect your account , and information you have on your PC , from people who want to steal it . WoW accounts sell for a considerable sum on the black market . Thieves do not care that you spent five years getting a full set of T9 gear on every character - they will sell it for the few pieces of gold they can get and transfer the money to gold farmers to make real world money . Some of the things you can do to protect yourself are : If this seems like a lot of effort , remember how long it took you to get all the gear you now have . Note also that it can take up to three weeks to get an account banned for botting and spamming ( by the hacker ) back . Some of your gear may never be retrieved completely . Keyloggers will also have been after your log - in details to payment sites ( such as PayPal ) , shopping sites ( such as Amazon ) and your bank and credit card details , so you may lose money in real life too . The information on this page will never mean that your are 100 % safe , as criminals are always coming up with new ways to " beat the system " . However , like the camper who stopped to put on running shoes when his friend was already running from the bear , if you follow at least some of this advice , you will have a better chance . Keep Your Computer Safe . Keep Your Computer Updated . Computer programs are complex things , written by fallible human beings . As such they may contain unintended flaws . One of the most frequently used ways of getting malware onto a computer is to exploit one of these flaws . As a consequence the companies , or , in the case of Unix and Linux , the communities , who offer these operating systems ( literally the programs that operate your PC ) , have to issue updates ( patches ) to fix them . These may address urgent security flaws , that could allow a criminal to craft a web page that could install malware ( malicious software ) on your PC . Or they may be fixes to things like drivers ( pieces of code that drive a piece of hardware to do something ) for your peripherals ( such as your monitor or printer ) or internal hardware ( such as your graphics card or hard disk ) that make your game go wrong . Every couple of years , the company may bring out a major new version , such as Windows 7 , or Vista from XP . Typically they will have better security , but , may also introduce new faults too . Good advice is " never install version x . 0 of anything " . For Windows , when Service Pack 2 is issued , most of the major holes will have been addressed . Malware used to be typically written to show off a cracker ' s skills , or cause damage by corrupting or deleting a user ' s files . However , as broadband access became widespread , criminals realised that it was much easier to spy on a persons computer as they typed passwords into their banking website than to rob a physical bank . Though it is often claimed in forums that Apple and Linux users are " safe " , this is increasingly being challenged as criminals realise that these users have grown accustomed to being lax about security . Vista ' s claim to be " more secure than previous versions " has also come into dispute in a recent survey of malware infestations . Consider using software such as the free Personal Software Inspector to check all your other software is up to date . A full scan from a security suite such as will also advise you of software with known vulnerabilities . Windows Updates . Microsoft tend to issues weekly on " Patch Tuesday " but may release urgent fixes to address serious flaws at any point . If you trust Microsoft to get fixes right most of the time , or cannot be bothered with security stuff , then set Windows to automatically update with the latest patches as follows : If you are less trusting of Microsoft ' s ability to generate fixes that work and do not break something else , then you can choose a different setting . Mac OS - X Updates . Mac OS X has a software update tool : For help on updating your Apple Mac , including how to set it to run automatically , see the Apple website " Mac OS X 10 . 5 Help " . Linux . If you are running WoW on Linux , you are probably technical enough to know how and why to update it . Otherwise , contact your Linux provider for information on how to download and install updates . Other Software to Update . If you do not have version checker software , then check regularly for updates to : Typically the software will have an option under Help to " Check for updates " . Install good security software . Whilst free security programmes offer a bit of protection against some known viruses , like the difference between free plastic bags and the strong re - usable shopping bags , the paid - for software on the whole will work better in the long run . For gamers , the paid - for software tends to run faster ( with some notable exceptions ) and be less intrusive , often with an option to run in " game mode " that is not available with free software . Necessary Software . As a minimum you will need : Ideally you should also have something to check for spyware , which , though it may not harm your computer , tends to send more personal information than you have authorised back to the company that created it . In the worst - case scenario , it may cause system instability , steal your email address resulting in spam , or result in Identity Theft ( where someone pretends to be you and opens bank accounts in your name , or even redirects your post ) . Anti - spyware will also check for which slows your computer down and intrudes by popping up windows to their adverts . Typically these anti - spyware software are free , but they do require you to run and update them manually unless you buy a paid - for version . If you think your computer is secure , and you do not need the hassle , try this tests : Antivirus . As the best software changes annually , see for an up - to - date list and reviews . You may want to look for anti - virus software with a games mode , such as GameSafe . Whilst these will not afford as much protection as a full anti - virus suite , they are designed to minimise the impact on game play . For example , when gamer mode is switched on , pop - ups will be disabled , and the update to virus signatures will be postponed . Firewalls . As the best software changes annually , see for an up - to - date list and reviews . Anti - Spyware . Two of the best programs are also free : Let WoW Wow You not Woe You . Use a Strong Password for your Account . Think of the password as the key to unlock your account . If it is too simple , it is easy to pick the lock . Words from a dictionary , pets names , birthdays and " password123456789 " are all easily guessible , or , with software , can be fired at a website by a botnet ( massive networks of malware infested PCs , thousands of them ) until the password is cracked . A strong password , like a strong lock , means the thieves are more likely to be detected trying to break in , so will move on to easier pickings . A strong password is : Remember : Use a Blizzard Authenticator . An authenticator is a small key - fob device that gives you a One Time Password ( OTP ) to enter in addition to your normal password , thus ensuring the user has something as well as knows something . These are cheaply available from the Blizzard store . Note that they are not infallible - you still need to keep your PC free of key - logging malware . These trojans , such as emcor . dll , can intercept the code you type in , tell you that you have " entered an invalid code " and send the real code , along with your username and password , to a thief working in real - time . This is called a " man in the middle " attack . Use a Separate eMail Address for Blizzard . With the merger of accounts into BattleNet , you will now have to use an eMail address to log into WoW . It is highly recommended that you set up a separate eMail address to use for , and only for , logging into WoW and getting eMails from Blizzard . Clear Stored Fields and Files . Be aware that this eMail address may be recorded if you use a public computer , so if you HAVE to use one to read Blizzard eMails or run WoW , ( or you use a laptop that might be stolen ) then : Install Blizzard Updates via the Launcher . Blizzard have supplied a launcher which should automatically download and install updates for you . This is particularly useful when there is a large patch as they typically make it available in sections which can be downloaded over several days , thus reducing the impact on your PC and their server . More information is at the Blizzard Background Downloader FAQ and Blizzard Downloader FAQ . However there are times when the background downloader does not work . This seems to be an issue with Windows Vista users who allowed Blizzard to automatically create the Public > Games > World of Warcraft directory , though it also occurs with Windows XP users . Blizzard believe it could be conflicting background applications , though its advice on closing background services requires more technical knowledge of Windows XP or Vista to carry out safely than most non - expert PC people have . The advice on updating Windows is relatively sound . Or it could be a problem with security software conflicts , or the downloader itself . One option to try is to backup the entire directory to a removable hard drive , delete the original and create a new c : \ users \ public \ games \ World of Warcraft directory from the administrator account . There are other issues and solutions scattered through the US and EU support pages and EU Technical Support Forum . If you find you are still unable to download the patches , having followed all the forum advice , then the best option is to copy the WoW - n . n . n . nnnn - to - m . m . n . mmmm - enGB - downloader . exe file from a computer or user you trust to have a " clean " PC . Run your own virus checking software on the download media or email before your copy it across . Running this should download the patch direct . There are many mirror sites listed ( including those on WoWwiki ) but these have frequently been attacked by crackers , with the purpose of installing malware to capture account information . Use these only as a last resort , and check any listed URL by copying it and running a Who - Is query at a reputable site , such as Network Tools . com . Note that you may have to remove the " http : / / " part if the site requires it and leave just the first main part ( up to and including , for example . com or . org or . co . uk ) . The second complication is obfuscated URLs . If the URL contains the " @ " character or " % 40 " then it will redirect you to the site after those characters . In short , if you are not sure it is safe , do not use it and contact Blizzard Technical Support for help . Never Share Your Account . Blizzard is very strict on this : " Blizzard does not recognize the transfer of WoW Accounts or Blizzard Accounts ( each an " Account " ) . You may not purchase , sell , gift or trade any Account , or offer to purchase , sell , gift or trade any Account , and any such attempt shall be null and void . " and " You are responsible for maintaining the confidentiality of the Login Information , and you will be responsible for all uses of the Login Information , whether or not authorized by you . " This includes the use of " power levelling " services , sharing with a friend or spouse , etc due to the risk of the account being compromised , the contents sold and emptied ( either to earn real - life money or for revenge ) . This costs Blizzard time and money to resolve and takes away time from legitimate users of the game who have to wait longer for legitimate issues to be resolved . The consequence of Blizzard finding you responsible for account sharing ranges from a temporary ban through to deletion and permanent closure of the account with no restitution . Gold buying may also result in account compromise , banning when discovered , or , worse , mis - use of your credit card , or even identity theft . Exception for Minors . The ONLY exception allowed is if you are an adult , you are allowed to open account on behalf of a minor child ( in the UK this is below age 18 , may vary by country ) . " You agree to these Terms of Use on behalf of yourself and , at your discretion , for one ( 1 ) minor child for whom you are a parent or guardian and whom you have authorized to use the account you create on the Service . " Surf the Web Safely . The internet has been likened to the Wild West , travel at your own risk . So how do you protect yourself better ? Look Where You are Going . Not all web page links point to where you think they are heading . Take for example Thís Link to a joke . Hands up if you clicked on it ? Always : File Extensions . Information is held on computers in files . Under Windows , each of these will have three or more letters at the end after a dot such as file . htm or file . html . This file extension is used to tell the computer what to do with the file , and which program to use to open it . By default , Microsoft hides file extensions on files , but this can be . This default is dangerous , because if someone sends you a file called IKilledYou . jpg , you may think it is a picture , but if file extensions are hidden , and it is really IkilledYou . jpg . exe , it may contain malware which will be automatically run as soon as you open it . In particular be careful of files sent to you , or links with , the following extensions : Get a Look - Out . Consider installing that warns you if a link may lead to a known " dodgy " page . Examples include : Beef up Your Browser . Consider changing to another that has a better record of preventing and fixing issues than Internet Explorer , the default browser supplied with your PC . Examples are Mozilla for Windows and Linux and for Mac . For e - Mail and newsgroups , you may want to look at , or which will also integrate your instant messaging . Internet Explorer . If you must use IE , make the following changes to IE to improve on the default security : From now on , you will be asked whether you want ActiveX objects to be executed and whether you want software to be installed . Sites that you are sure are safe can be moved to the Trusted Zone in Internet Option > Security . Though as servers can be hacked and defaced , it is better NOT to add any sites to this zone , but always prompt . Is that e - Mail REALLY from Blizz ? " You have been reported for spamming and your account is now on a three day ban . Please click on this link if you wish to dispute this decision " Now the message " from " says it comes from noreply @ blizzard . com but the " from " can VERY easily be spoofed so how can you tell if the message is genuine . . . or not ? There are several technical ways of doing it , but firstly , simply try logging in to your account . No ban ? The message was not genuine . If you have been banned , then ignore the e - Mail and go DIRECTLY to the Blizzard Account Support pages . If you really must follow the link , then right click on it and COPY the link and paste it into your address bar . Does the link have funny characters or extra ones ? Does it have a Tiny URL - in which case copy it and use the preview facility : instead of going to http : / / fat . ly / jdmf32 go to http : / / preview . fat . ly / jdmf32 for example . However , opinion is divided on the security and privacy of these shortened links , so use with care . If the link is malware , and you want to take a step further report the spammer , then consider joining SpamCop . Hackers use clever " social engineering " techniques to make you feel worried ( " account banned " ) or clever ( " get ahead with this hack " ) and do things in a panic that you would otherwise stop and think about . Other types of e - Mails you may receive include : ALL of these ( even if not infested with malware ) would break Blizzard ' s terms and conditions of fair play . They could ( and have for other players ) resulted in bans or out - right account termination ( no more World of Warcraft , bye - bye Level 80 characters . . . ) . Make your e - Mail client safer . If you use Outlook , then turn off Mail Preview for your Inbox folder and right - click on genuine messages to set up Rules to automatically move them to Folders and on the address to add it to your address book . Treat all other e - Mails with caution . Consider using a different e - Mail client to Microsoft ' s . Turn off HTML viewing . This will depend on your e - Mail client . Read the Help file . Check that Instant Message . Apply the same caution when using instant messaging . How do you know it is your friend on the other end , and not his spiteful kid brother who is using his logged in account whilst he is out , or your worst enemy who has found out the password , or even a hacker from Russia or China ? One of the most successful social engineering hacks is being carried out by a " Rasputin bot " or " SlutBot " , that pretends to be a lovelorn human male or female . When using software ( IM , Yahoo ! Messenger , IRC , mIRC , ICQ , AIM , WLM etc ) : You may prefer to switch to a different multiple - access IM ( readers are strongly advised to check for security issues and reviews before installation ! ) and change all your passwords regularly . These include : Safer Websites . Note that some of these websites have also been known to have been hacked , and no website can ever be considered truly safe . However when they are , due to their popularity , news of the hack gets out sooner . This list should help you identify real versus spoof sites ( check the history page to ensure this page has not been edited ! ) : Further Reading . For more information see :