Ancient Online Account Creation and Security: 2FA, Password Reset and Account Deletion

In Ancient Online: Remastered you do not need the website to open an account, protect it or, if it comes to that, delete it: everything is done inside the game. This guide walks through sign-up step by step, shows you how to turn on two-step verification (2FA), and explains what to do if you forget your password or your username.

The game is in development; screen names and steps may change slightly before launch.

First, a warning: there is no login form on the website

On the official Ancient Online websites (ancient.astent.games and astent.games) there is no account login, no sign-up form and no page that asks for a password. If you see a web page, an email or a message asking for your game password, your 2FA code or your recovery codes, it is a scam attempt; do not enter your details.

How do you create an account?

On the game's login screen, click the Create Account link:

1. Enter your email address. Only one account can be opened per email address.
2. Choose a username: 4–16 characters, letters and digits only.
3. Set a password: at least 8 characters. Passwords that contain your username are not accepted.
4. Accept the terms of use. If needed, you will be asked for a short human verification (captcha).
5. Type the 8-digit verification code sent to your email into the game.

Your account is ready, and you can move on to creating a character. You can use either your username or your email address to log in. The next steps are in the beginner's guide.

How do you turn on two-step verification (2FA)?

2FA keeps people out of your account even if your password is compromised. In Ancient Online, 2FA works with the 6-digit codes generated by an authenticator app on your phone.

1. Open the account security window in the game and select Set up 2FA.
2. Scan the QR code on the screen with your authenticator app, or enter the key by hand.
3. Type the 6-digit code shown by the app into the game.
4. You are shown 10 recovery codes. Save them somewhere safe: if you lose your 2FA device, each code lets you log in once. After you close the window, the codes are not shown again.

While 2FA is on, the code is requested at login and for sensitive actions.

Remember this device for 30 days: If you tick this option when logging in on your own computer or phone, you will not be asked for a 2FA code on that device for 30 days. Do not tick it on shared devices. You can see the list of remembered devices in the account window.

If you are running low on recovery codes, you can generate a new set from the same window with Regenerate recovery codes; the window also shows how many codes you have left.

What does the account window show you?

• The date your account was created and the time of your last login,
• whether 2FA is on and the number of recovery codes remaining,
• the recent login attempts made on your account,
• a pending email change or deletion request.

If you see a login attempt you do not recognise, change your password and use Sign out everywhere: the sessions on all other devices are closed, while the session on the device you are using carries on. Changing your password also closes the sessions on other devices.

Logging in from a new device

When you log in to your account from a new device, an 8-digit approval code is sent to your email. You enter the code on the device that is awaiting approval; until it is approved, trading is locked on that device. This measure makes it harder for your items to be transferred to someone else even if your password is stolen.

I forgot my password or my username

Password reset

1. On the login screen, click Forgot Password and enter your username or your email.
2. Type in the code sent to your email and your new password.
3. If 2FA is on, you also need to enter the code from your authenticator app or a recovery code. A password reset does not disable 2FA.

For security reasons, the screen shows the same response whether or not there is an account registered to the address you typed.

I lost my 2FA device and I have no recovery codes either

During a password reset, you can report that you have lost your 2FA. In that case a 7-day waiting period begins; when it is over, 2FA is reset. The wait is there to make sure it is the real owner who is recovering the account.

I forgot my username

Type your email address into the Forgot Username link on the login screen; your username is sent to your email.

Can I change my email address?

Yes, from the account window inside the game. After you verify the new address with a code, the change takes effect 14 days later and a cancellation code is sent to your old address. If you did not make the change, you can cancel it with that code through the Cancel e-mail change link on the login screen. This wait prevents someone who has taken over your account from changing your email straight away and locking you out.

How do I delete my account?

1. Start the game and log in with your account.
2. Open the account window from the character selection screen or from the ESC menu in the game.
3. Confirm your request in the Account Deletion tab.

The request becomes final after 14 days; within that time you can cancel it from the same tab. When the period ends, your account and all your characters are deleted, and your personal data is deleted or anonymised. If you cannot access the game, the account deletion page describes another route.

Deleting a single character also works with a 14-day waiting period. If the character is in a guild, is a guild leader or has an open offline market, you need to close those down first.

6 tips for keeping your account safe

1. Use a long password that is unique to this game; do not repeat a password you use elsewhere.
2. Turn on 2FA and keep your recovery codes somewhere offline.
3. Use the "Remember this device for 30 days" option only on your own devices.
4. Do not share your password, your 2FA code or your recovery codes with anyone; someone who asks for them is trying to trick you.
5. Do not enter your details on sites outside the game that promise "free items" or an "account upgrade". The official websites have no login form.
6. Protect your email account with 2FA as well; recovering your game account depends on your email.

What happens behind the scenes?

• Passwords are not stored as plain text; they are stored with a deliberately slow hashing method designed for this job (Argon2id).
• The connection between the game and the server is encrypted.
• Repeated failed attempts run into a rate limit; a captcha is requested when necessary.

Frequently asked questions

Can I open a second account with the same email?

No. One account can be opened per email address.

Can I use the same account on my phone and my PC?

Yes; your account is independent of your device. Details are in the PC and mobile cross-platform guide.

I cannot log in. Is the problem with my account?

Check the server status page first; there may be maintenance or a channel outage.

Next step

If your account is ready, the beginner's guide shows the way from choosing an empire and a class to your first skill path.