hot  /  reviews  /  videos  /  cblogs  /  qposts

Tips for securing your Xbox Live account

7:00 PM on 01.14.2012 // Chris Carter

[Dtoider Magnalon has some great tips to protect your Xbox account from being hacked. - Kauza]

Lately, we've been hearing stories of an increasingly alarming Xbox Live hacking issue, and the lack of care and concern that Microsoft has exhibited in some cases. Sure, just being hacked is beyond inconvenient, but users also risk losing access to their accounts for extended periods and the horrible possibility of having to speak with Xbox support. Yikes.

In light of all of these issues, I thought it would be a good idea to share some security tips. Read on to learn the best ways to avoid having to put yourself through a Microsoft nightmare.

Choose a strong password

There are many schools of thought in regards to passwords. My philosophy is "you can never be too complex as long as you take the time to remember it". While this comic comically indicates that a longer simpler password is more secure than a shorter complex one, a longer complex password is not out of the question; provided you're willing to learn it. The comic does have a point though - passwords under ten characters, even in "l33t speak", are easily compromised. If you're not comfortable with complex passwords, let Xbox Live be your first exercise.

Make sure this password is only used for Xbox Live - a number of people are claiming that they use the same password for their EA account, which is linked to their Live account - this may be causing issues (the same can be said for Activision's Call of Duty Elite, and Ubisoft's uPlay). To avoid spillage, make sure you change this password every so often. You can change it every month, or every few months if you wish.

Additionally, it doesn't hurt to update your information and secret question/answer, so that you can recover your information from Xbox Customer Support in the instance you forget your password.

Do not link your Credit Card or PayPal to Xbox Live

As a general rule, you can buy cards at major retailers for both subscriptions and Microsoft Points (MSP). This is easily the most secure method of conducting business over Xbox Live.

However, in some cases you will need to link some method of payment - for instance, Microsoft will require you to input a method when buying the Xbox Live Gold Family pack, or any other special offer found through Xbox Live or exclusively. You can subvert this requirement by grabbing a Visa Credit Gift Card from pretty much anywhere. Unfortunately you'll have to pay $2-5 in fees to nab this card, but as long as it has an expiration date and CVC number on the back, you're good to go.

As a last resort, for people who are against limited payment options, linking PayPal can be acceptable as long as it's not linked to your bank account, but I'd recommend the above two options. Keep in mind that Microsoft stores all old credit card information - you can clearly see it on your Live homepage in account settings - while this is most likely encrypted (and a hacker would only be able to view the last 4 digits of the card), it's still a security issue, so link cards at your own risk.

If you're having issues with removing a card, even with auto-renewal off, it is most likely because this card is associated with your Xbox Live subscription. To get out of this, attach a pre-paid Visa card (after you link it to the account as the "second" payment method), then switch your account over to that card, then delete your primary "real" card.

Beware of Social Engineering

This goes beyond the typical "do not respond to random Xbox Live messages of people asking for your password promising Call of Duty prestige levels". Social Engineering can be as simple as someone you know finding your password written down near your computer. It can be as complex as someone stalking you over the web using your alias, Gamertag, or description in your Xbox Live Gamer Profile, to find PII to use against you in a hack attempt. People will also attempt to find information through means such as community profiles, Facebook, Twitter, Raptr, or other such gaming communities.

To be blunt, make sure you're not putting too much information out on the web. There's an old saying - "once it's on the web, it isn't coming out". Watch how much PII you put into your Xbox Live Profile. While you may think it's ok to state your exact address and full name, the wrong party can easily use this information to either steal your account by calling Xbox Live customer Service, or locate more information about you online.

I've literally seen people take pictures of their Government IDs and share them over public Facebook posts to show how proud they are of their new job. Always make sure you're thinking twice over what you put on the internet.

Beware of Software Attacks

Social Engineering is a security compromise based on human interaction and trickery, but software and machines can also compromise your account. Keyloggers are malicious programs that can detect keystrokes and passwords, and enable hackers to access your information. Internet pirates are probably familiar with "keygen" software and other such programs - these can be Trojans, and install software on your machine. Additionally, things as harmless as Windows Media Player videos and Internet Links can install software as well through loopholes in WMP and IE. As a general rule, do not use IE, and do not use WMP - when you download a video, attempt to open it in a third party program (I use VLC).

However, despite how hard you try, 99% of the computers in the world will get a virus or two in their lifetime, but there are a number of ways to combat these breaches. You can install a host based firewall/intrusion detection system (Windows comes with one for starters); Adware/Spyware removal; and Anti-Virus software.

A word of warning: be careful with Anti-Virus software - often times the software will prey on users, and will be malware itself - even reputable companies. For instance, I refuse to use Norton because of how much it can make a mess of your system. I like Malwarebytes and AVG - both have free versions that offer less protection. Ensure that your firewall is constantly running, and your software runs automatic updates and checks (at a convenient time, like when you're at work or asleep) every day. The key is to keep the software updated, to avoid zero day attacks.

While this may seem like it's the ramblings of a paranoid android, keep in mind that you can never be too secure.

Feel free to follow as little or as much of this as you're comfortable with.

Chris Carter, Reviews Director
 Follow Blog + disclosure DtoidChris Tips
Chris (Magnalon) has been enjoying Destructoid avidly since 2008. He finally decided to take the next step, make an account, and start blogging in January of 2009. Now, he's staff! -----------... more   |   staff directory

 Setup email comments

Unsavory comments? Please report harassment, spam, and hate speech to our community fisters, and flag the user (we will ban users dishing bad karma). Can't see comments? Apps like Avast or browser extensions can cause it. You can fix it by adding * to your whitelists.

Status updates from C-bloggers

Cynic without a Cause avatarCynic without a Cause
I just wanna get drunk and listen to J-pop
extatix avatarextatix
Spiel was mightily expensive. Holy shit... Good thing I didn't bring more money with me, too. Saw enough stuff I'd love to own.
StriderHoang avatarStriderHoang
In memory of Lesser Dog of the snow fields. 1 spaghetti = never forgetty
ChrisHannard avatarChrisHannard
Trialling PS Now - review to come later - has reminded me of a piece of little-reported PS3 news. Owners of hacked PS3s could turn any PS2 game into a 'Classics' title and run them on a bog-standard PS3 with few issues.
nanashi avatarnanashi
Wanna ask a question for tomorrow's PStoid? You still have time! While you're at it don't forget to ask one for Riobux too!!
SkarKrow avatarSkarKrow
I caught a reflective mumbling about MGSV's open structure and how it doesn't sit well with me, to be published whenever I litter it with images.
Gamemaniac3434 avatarGamemaniac3434
Welp, an article today got me thinking about this so without further ado, whats your favorite pokemon? This is mine:
Clarence Sheridan avatarClarence Sheridan
Winter is Coming and so is the new mobile game: “Frosty The Assassin” New Mobile Game coming soon... [img][/img]
SkarKrow avatarSkarKrow
I cast my little worm in to the pond for a topic to try to make a blog about today. I fish fish fish but nothing bites bites bites.
Perro avatarPerro
I cracked and bought Final Fantasy Dimensions on Android last night. Half off sounded like just the right price, though I wish this came out on 3DS or even the Vita but at least it gives me something to do on the porcelain throne!
Jiraya avatarJiraya
Coming soon in Mortal Kombat XXX DLC - HUMILITALITY [youtube][/youtube]
Robo Panda Z avatarRobo Panda Z
Those N64-era THQ wrestling games have actually held up really well over the years. Take that, nostalgia!
Halflocke avatarHalflocke
Underhero a 2d side scrolling rpg on indie gogo
extatix avatarextatix
Heading off to Spiel in a bit. A whole lot of games there, just of the cardboard variety. I love me some board games.
absolutfreak avatarabsolutfreak
Finally finished The Witcher 3. Definitely one of the best games I've played in my 30 years or so of gaming. Now onward to Ground Zeroes/Phantom Pain.
Nathan D avatarNathan D
*playing an old ps1 game* "START and SELECT don't bring the menu up?! WELL WHAT THE FU-oh, it's Triangle..."
TheDefenestrator avatarTheDefenestrator
If anyone's playing Marvel Puzzle Quest (any platform) you should join my Alliance, RedRightHand, and help me kick some Galactus butt for their second anniversary event. (Please?)
Shinta avatarShinta
MGS Online Day 3. I have 3 character up to level 10 now, one in each class. They're all pretty handy, but I do miss the scout's mark speed the most on other classes.
RadicalYoseph avatarRadicalYoseph
The SW: Battlefront is pretty and has great sound design, but the gameplay is so shallow and has seemingly no depth! If the full game is like this I will be disappointed.
Torchman avatarTorchman
*looks at Amazon preorder* This one's for you Chib'
more quickposts



Invert site colors

  Dark Theme
  Light Theme

Destructoid means family.
Living the dream, since 2006

Pssst. konami code + enter

modernmethod logo

Back to Top

We follow moms on   Facebook  and   Twitter
  Light Theme      Dark Theme
Pssst. Konami Code + Enter!
You may remix stuff our site under creative commons w/@
- Destructoid means family. Living the dream, since 2006 -