Security information

Protect your account

Use ExtinctionOS only at https://extinctionos.com or at a community address explicitly published through that site. Confirm the HTTPS address before signing in or downloading software.

ExtinctionOS will never ask for

• Your Discord password, Steam password or payment-card number in chat.
• Your complete RCON password, bot token, API secret, private key or session cookie.
• Remote desktop access supplied through an unsolicited message.

Downloads and pairing

Obtain companion and connector downloads only from the authenticated ExtinctionOS interface. Pairing codes are temporary secrets. Do not post them publicly or send them to someone claiming to be support.

Report a vulnerability or phishing attempt

Email security@extinctionos.com with the affected address, a concise reproduction, impact and any safe supporting evidence. Do not access other users' data, disrupt the service, deploy malware, demand payment, or publish active secrets. Good-faith reports will be investigated.