How to Protect Your Roblox Account

Use a strong, unique password

Most stolen Roblox accounts are stolen because the same password was used elsewhere and leaked. Pick a password that is at least 12 characters, mixed letters and numbers, and used nowhere else. A password manager makes this easy.

Turn on 2-step verification

1. Open Settings → Security.
2. Under 2-Step Verification, choose Email or Authenticator App.
3. Verify the code Roblox sends.

Verify your email and phone

Without a verified contact method, a stolen account is almost impossible to recover. Add an email under Settings → Account Info, then click Verify. Add a phone number too if you have one.

Never share your password or cookie

Roblox staff will never ask for your password. Any website that asks you to log in to view a "Robux generator" or to claim a prize is a phishing site. Browser extensions that claim to enhance Roblox often steal your session cookie, which is just as bad as stealing your password.

Watch out for these scams

• "Free Robux" sites or videos — all are scams.
• DMs offering trades for items you don't own — they want your account.
• Fake support accounts that DM you about "violations" with a link to sign in.
• Browser extensions promising more features or better UI.
• QR codes shown in random games asking you to scan with your phone.

If you think your account was stolen

1. Change your password immediately from a clean device.
2. Sign out of all sessions under Settings → Security.
3. Contact Roblox Support through the official site only.
4. Run a full antivirus scan on every device you've signed in from.

Frequently asked questions