Never reuse official RuneScape credentials
Create a unique username and password for each RSPS. Never enter your Jagex Account password, official RuneScape password, bank PIN, backup codes, or recovery information into a private server website or client.
Use a password manager to generate a different password for every service. Enable multi-factor authentication on your email and official accounts wherever it is available.
Confirm the official server website
Open server websites through the Play now link on the server profile and check the domain before signing in or downloading anything. Watch for misspellings, unexpected redirects, copied branding, and download links hosted on unrelated file-sharing domains.
RuneTopList lists community-run servers but does not operate their websites or clients. A directory listing is not a guarantee that every download or transaction is risk-free.
Treat client downloads cautiously
Keep your operating system, browser, and security software current. Scan downloaded files before opening them and be cautious when a client asks for administrator access, security exclusions, browser extensions, or unrelated software.
Do not disable device protections simply because a forum post or chat message tells you to. Ask the server staff for a clear explanation and an alternative download if a file is blocked.
- Download only from the confirmed official domain.
- Scan files and verify unexpected warnings before running them.
- Back up important files and keep your browser and operating system updated.
Understand payments and virtual items
Read the server terms and refund rules before buying virtual items, memberships, or benefits. Private server items can change value, be removed during resets, or become unavailable if a server closes.
Use payment methods with appropriate buyer protections. Never send passwords, authentication codes, cryptocurrency seed phrases, or remote access to a staff member.
Report misleading or unsafe listings
If a RuneTopList entry points to an impersonation site, deceptive download, or content that no longer belongs to the listed server, stop using the link and contact RuneTopList with the server name, page URL, and a concise description of the issue.