All Guides

Account Safety: What to Watch Out For

A few habits that keep your game account and your data safe.

Treat your session ID like a password

Your dosid session ID grants access to your current DarkOrbit session. That is exactly why AccInsight can read your statistics with it — and why anyone else could, too. The rules are simple:

  • Enter your SID only on AccInsight itself, never in Discord DMs, forums or on websites you don't know.
  • Nobody legitimate will ever ask you for your SID — not “AccInsight staff”, not “DarkOrbit support”, not a helpful stranger. Treat every such request as an attack.
  • After running an analysis, you can log out of DarkOrbit and back in — this invalidates the old session ID completely.

AccInsight itself uses the SID once for the analysis and does not store it. If a website or person wants to keep your SID, that is a red flag.

Never share your real credentials

A session ID at least expires — your email address and password do not. Never give your game login to anyone, for any reason: not for “boosting”, not for “checking” your account, not for “verification”. Once someone has your credentials, they can change them and lock you out permanently.

  • Use a unique password for DarkOrbit that you use nowhere else.
  • Secure the email account behind your game account with a strong password and two-factor authentication — whoever controls the mailbox controls every account attached to it.

Recognize phishing pages

Phishing is the most common way game accounts get stolen. The pattern is always the same: a link that looks like a login page, sent with a tempting or urgent story (“free uridium”, “your account will be banned, verify now”).

  • Check the domain character by character before entering credentials. darkorbit.com is official; lookalikes with extra words, dashes or unusual endings are not.
  • Be suspicious of any login page you reached through a chat message rather than by typing the address yourself.
  • AccInsight never asks for your DarkOrbit username or password — the analysis works with the session ID alone.

Choose the right visibility for your account link

When you create an account link, think about what you are publishing:

  • Public pages are listed on the homepage and can be indexed by search engines. Choose this only if you are comfortable with anyone seeing the account's stats.
  • Private pages are reachable only via the direct link and are excluded from search engines. If in doubt, start private — you can always run a new analysis with public visibility later.
  • Remember that whoever you send a private link to can forward it. A private link is unlisted, not encrypted.

If something goes wrong

If you suspect someone has access to your account:

  1. Change your DarkOrbit password immediately, and the password of the connected email account as well.
  2. Log out of all sessions by logging in fresh after the password change — this kills any stolen session IDs.
  3. Contact the official DarkOrbit/Bigpoint support through the game's website — never through “support agents” who message you first.
  4. If the attacker contacted you on Discord, report the profile to Discord and warn your community. Known offenders end up on our banned users list.

Also read: How to Spot Scammers — the warning signs that protect you before anything happens.