Hi Liodeners!

We've been working hard this week to improve account security after a situation happened recently where a player of ours had their account accessed by someone who didn't have their permission, and as a result, their valuable lions were killed. Luckily, as the player was active, we were able to retrieve the lions from backups.

This happened likely due to using the same username and password combination for another service, which has subsequently been leaked in one of the big, recent data leaks.

It's important to note here: there has not been a data leak or security issue from Lioden, but rather with information that has been leaked from other services. If you have accounts elsewhere that use the same username and password, and that information gets leaked, then your login for Lioden is also out there.

We strongly encourage players to use unique passwords for all services they are logged into so that this is never an issue for you.

However... We've also been making some important adjustments.

Here's what we've put in place:
* After 5 failed login attempts, new logins to your account will be locked for 15 minutes, and an email goes out to let the account holder know that 5 failed attempts happened.
* This continues every 5 failed login attempts, until 30 failed login attempts are reached - prompting the site to permanently lock new logins to the account, and require you to reach out to our support staff in order to get it unlocked.

These steps won't log you out of your account if you are already signed in, but will prevent new logins from other devices.

These new steps have been introduced to try and protect accounts from brute force password attacks. While this should help - the best way to keep your account safe is to use a unique, strong password that you don't use for any other site. If another site gets accounts compromised, and you use the same password there as you do on Lioden, it leaves your account open to risk.

Top tips for password security:
* Don't use the same password for Lioden that you do on other sites or services.
* Use a mixture of letters, numbers and special characters (including uppercase and lowercase letters) in your password.
* Don't use "easily guessable" passwords, such as: 123456, password123, etc.

As a general reminder, Lioden staff will *never* ask you for your password!