Jagex Launcher vs Legacy login in 2026: what to look for when buying

Most accounts in the market today are Jagex Launcher format. Legacy accounts still exist but the way you log into them changed in January 2026 when the Legacy Java client shut down. If you're looking at a Sythe or Eldorado listing that says "Legacy login," you should know exactly what that means now, because the answer is different from what it was even six months ago.

This is the buyer-side breakdown: what each format actually is in 2026, the recovery and cascade-ban differences that matter, and the narrow set of cases where Legacy is still the right pick.

The migration timeline in one paragraph

Jagex Accounts opened to OSRS players on 5 April 2023 (the open beta newspost is the starting marker). The Jagex Launcher became Jagex-Account-only on 7 November 2023, per the Next Steps newspost. New account creation switched to Jagex-Account-only on 9 January 2024. The Legacy Java client (the standalone non-launcher Windows client used to log direct username/password accounts) was deprecated on 24 July 2024, ran its final update on 1 October 2025, and shut down on 28 January 2026. The OSRS Wiki Java Client page has the timeline and the screenshot of the shutdown message.

So every Legacy account on the market today was created before 9 January 2024 and has not been migrated to a Jagex Account since.

What "Legacy" actually means in 2026

A Legacy account is one with a direct username/password login that has never been imported into a Jagex Account. In 2026 there are two surfaces these accounts can still log into:

1. The C++ Steam client for desktop play.
2. The native Old School Mobile app for mobile play.

That's it. The Java client is gone, the Jagex Launcher cannot detect or hand off to legacy clients (per the v2.4.0 launcher update on 26 Feb 2026), and third-party clients (RuneLite, HDOS) handle their own authentication. Jagex's own Legacy Java retirement newspost framed the shutdown as anti-botting: "Many more are using this client for botting and other illicit activity."

A Jagex Launcher account, by contrast, lives behind a Jagex Account email and password (and an optional Authenticator). The OSRS character inside it is one of potentially many "characters" attached to a single Jagex Account. The launcher routes you in. There is no direct character-level login any more.

The Jagex Account umbrella

This is the mechanic that decides cascade-ban risk and it's the one buyers ask me about most often.

A Jagex Account is the container. An OSRS character (the thing with your name, levels, and bank) lives inside the container. One container can hold multiple characters. The pre-purchase question is: when you buy an OSRS character on the Jagex Launcher format, do you attach it to your existing Jagex Account, or do you create a fresh Jagex Account just for it?

Per the OSRS Wiki Jagex Account page, the official policy on sanctions is character-level by default: "Sanctions such as bans and mutes are still applied at the character level. However, Jagex will review this policy over time as usage of the system increases."

So one character getting banned does not automatically ban the rest of the Jagex Account in the documented policy. There are documented exceptions, though, and the list is worth reading directly: account- level bans apply "if the Jagex Account belongs to a hijacker and is used to store hijacked character accounts, if the owner is believed to be under 13 years of age, or if there is evidence the owner poses a real-life threat to another person." The first exception is the one that matters for buyers. A Jagex Account holding a stable of bought characters has a non-trivial chance of being framed as "hijacker storing hijacked characters" if Jagex decides to look.

The safe pattern most operators settle on: one Jagex Account per bought character. Treat them as physically separate. Do not link a new buy to your main's Jagex Account.

This is most of the reason the Legacy format still has buyers. Legacy accounts can't be attached to a Jagex Account by accident. They sit completely outside the umbrella.

Recovery flow differences

The buyer-relevant difference, framed plainly.

On a Jagex Launcher account, once you've changed the email to your own, the original creator is locked out. Jagex's Lost access support article states: "For the sake of optimal account security, Jagex is unable to modify your Jagex account email or disclose it to you." The character welds to the new email. Even the person who made the account originally can't recover it through normal channels once it's migrated and the email is changed.

On a Legacy account, the recovery surface is older and softer. The original creator can still attempt social-engineering recovery through Jagex's appeal flow using historical answers, billing history, or the original creation email if they kept access to it. Sythe's long- running guidance is that "once the email is changed to yours in a Jagex Launcher account, the account becomes non-recoverable, even by the person who created it" but the equivalent isn't true for Legacy in the same way.

So Legacy accounts are slightly more recoverable by their original creator, and Jagex Launcher accounts welded to your new email are the most recovery-resistant. Most buyers want the second category.

Security feature differences

Both formats support TOTP-based two-factor authentication. The OSRS Wiki RuneScape Authenticator page documents the implementation. Practical differences in 2026:

• Jagex Accounts get 10 generated backup codes through the account settings panel. Legacy accounts use the historic Authenticator flow, which doesn't include the backup-code option.
• Jagex Account two-step authentication includes a "trusted device" setting with a 30-day window. Legacy accounts have a thinner trusted-IP model.
• Forgotten-password recovery on a Jagex Account routes through the email on file (which you control after step 1 of the first-60-minutes playbook). Legacy accounts have an additional creation-detail-based recovery path that can be a security risk if the seller still remembers it.

For a buyer who hardens correctly, the Jagex Launcher format is more secure. For a buyer who wants to keep the account fully separate from any Jagex Account they already own, Legacy stays useful.

When Legacy is the right pick

Three cases I see regularly:

1. You already have a Jagex Account with characters you don't want exposed. Buying a Legacy account is the cleanest way to add a character that lives outside your umbrella. The 50 melee Legacy SKU on my catalogue exists exactly for this audience.
2. You're planning to resell the character later. Importing a Legacy account into a Jagex Account is one-way and voids the old login. A character that stays Legacy can be sold on with its original credentials intact.
3. You want the recovery flexibility. Legacy accounts have a wider recovery surface, which is a downside for security but an upside if you ever lose the email you set up for it. Cuts both ways.

When Legacy is the wrong pick:

• You want to play on the Jagex Launcher. You'd have to migrate it first, which welds it to a Jagex Account and burns the Legacy format.
• You want backup codes for the Authenticator. Not available on Legacy.
• You're worried about the seller recovering it. Legacy is marginally more recoverable by the original creator.

Pre-purchase checks

Two things any buyer can verify before paying.

Is it actually Legacy? If a seller says "Legacy login" but the username/password doesn't authenticate on the C++ Steam client or the Old School Mobile native app, the account has either been migrated already (and "Legacy" is misadvertised) or the credentials are wrong. Test on a supported surface before paying.

Does the email field match the seller's claim? Jagex Launcher accounts show the Jagex Account email on settings. If the seller claims to have provided "no email" but the settings panel shows an unfamiliar address, the seller still has a recovery path. This is the kind of mismatch worth catching before the credentials change.

Format comparison

What I sell

The catalogue mostly leans Jagex Launcher because that's where most buyers should be. The exception is the 50 melee Legacy SKU which exists for the "keep it off my main's Jagex Account" use case. Everything else, combat builds, TTL accounts, and tutorial-island accounts, are Jagex Launcher format.

If you're not sure which one you want, the accounts in stock right now lists every option with its format labelled. The first-60-minutes playbook covers hardening either format after you take ownership. Crypto is the default, Stripe is there if you'd rather. Delivery is automated.