Square Enix Warns Final Fantasy XIV Players About Unauthorized Account Access

Square Enix is warning Final Fantasy XIV players after confirming cases of unauthorized access to Square Enix accounts. The company says third parties appear to be using email addresses, account IDs, and passwords obtained from other online services, then trying those same details on Square Enix accounts.

The notice was posted on October 19, 2026, and the advice is straightforward: if you’ve reused your Square Enix password anywhere else, change it now. Square Enix also recommends changing passwords that use easy patterns, birthdays, or other details that could be guessed.

Square Enix says it is restricting access to accounts it believes may have been compromised. If that happens to your account, the company will send instructions to the email address registered to it. Players who need to update their login details can use the password reset page.

The company is also pushing players toward One-Time Passwords, which add an extra verification step for logins. Square Enix says these are “highly effective” against unauthorized access, and players can read more through its One-Time Passwords information page.

There’s also a bigger step on the table. Square Enix says that if unauthorized access attempts continue to rise, it may initiate a password reset for all Square Enix accounts. For now, the company is asking players to review their account security and avoid reusing login details across services.

Further reading: Official Final Fantasy XIV Lodestone notice