Account Safety: What to Watch Out For
A few habits that keep your game account and your data safe.
Treat your session ID like a password
Your dosid session ID grants access to your current DarkOrbit session. That is exactly why AccInsight can read your statistics with it — and why anyone else could, too. The rules are simple:
- Enter your SID only on AccInsight itself, never in Discord DMs, forums or on websites you don't know.
- Nobody legitimate will ever ask you for your SID — not “AccInsight staff”, not “DarkOrbit support”, not a helpful stranger. Treat every such request as an attack.
- After running an analysis, you can log out of DarkOrbit and back in — this invalidates the old session ID completely.
AccInsight itself uses the SID once for the analysis and does not store it. If a website or person wants to keep your SID, that is a red flag.
Never share your real credentials
A session ID at least expires — your email address and password do not. Never give your game login to anyone, for any reason: not for “boosting”, not for “checking” your account, not for “verification”. Once someone has your credentials, they can change them and lock you out permanently.
- Use a unique password for DarkOrbit that you use nowhere else.
- Secure the email account behind your game account with a strong password and two-factor authentication — whoever controls the mailbox controls every account attached to it.
Recognize phishing pages
Phishing is the most common way game accounts get stolen. The pattern is always the same: a link that looks like a login page, sent with a tempting or urgent story (“free uridium”, “your account will be banned, verify now”).
- Check the domain character by character before entering credentials.
darkorbit.comis official; lookalikes with extra words, dashes or unusual endings are not. - Be suspicious of any login page you reached through a chat message rather than by typing the address yourself.
- AccInsight never asks for your DarkOrbit username or password — the analysis works with the session ID alone.
Choose the right visibility for your account link
When you create an account link, think about what you are publishing:
- Public pages are listed on the homepage and can be indexed by search engines. Choose this only if you are comfortable with anyone seeing the account's stats.
- Private pages are reachable only via the direct link and are excluded from search engines. If in doubt, start private — you can always run a new analysis with public visibility later.
- Remember that whoever you send a private link to can forward it. A private link is unlisted, not encrypted.
If something goes wrong
If you suspect someone has access to your account:
- Change your DarkOrbit password immediately, and the password of the connected email account as well.
- Log out of all sessions by logging in fresh after the password change — this kills any stolen session IDs.
- Contact the official DarkOrbit/Bigpoint support through the game's website — never through “support agents” who message you first.
- If the attacker contacted you on Discord, report the profile to Discord and warn your community. Known offenders end up on our banned users list.
Also read: How to Spot Scammers — the warning signs that protect you before anything happens.