RECLAIM CITY · DAY 18

Radically Good at Security Training

Security training usually means a video you half-watch and a quiz you click through. Reclaim City does it differently. Every mission is a real thing you do to a real account — check it for breaches, change the password, turn on two-factor, pull your data back from a broker — and each one you finish takes back a building in a city the data brokers own.

We launched it on September 7th. Eighteen days later, here’s what players did.

Real-world security actions
18,296
things people actually did to protect their real accounts
Not quiz answers. Not badges. Breach checks, new passwords, two-factor, credit freezes and privacy settings — on the accounts they use every day.
RECLAIM CITY · FIRST 18 DAYS
Follow-through
89%
of missions people started, they finished
21,376 started. 18,987 finished. Most people who opened a real security task saw it through.
RECLAIM CITY · FIRST 18 DAYS

What people found

Breaches uncovered
4,847
times a player checked an account and found it in a real data breach
3,611 of those turned up three or more breaches on a single account. That’s the moment the game stops being a game.
RECLAIM CITY · FIRST 18 DAYS

What people did about it

Passwords
1,616
passwords changed
Two-factor
1,446
accounts locked down with 2FA
Privacy
1,127
privacy settings taken back
Credit
144
credit freezes and locks

Plus 5,535 audits of who’s logged into your accounts and from where — the check that catches the session you forgot about on a library computer.

Two-factor is the step security agencies tell everyone to take first, and the one almost nobody gets around to. Our players did it one thousand four hundred and forty-six times in eighteen days. Every one of those is an account that a leaked password alone can’t open anymore.

Who’s playing

Players
9,272
people in eighteen days
Countries
88
countries and counting
On phones
75%
played on a phone — the device their accounts actually live on
Record
98
missions finished by one very secure person

Why this matters

Most people know they should turn on two-factor and freeze their credit. Knowing isn’t the problem. Getting around to it is. Reclaim City turns each of those chores into a building you take back, and it’s honest about why it matters: the accounts are yours, and the breaches are real.

Eighteen thousand actions is eighteen thousand fewer open doors. Every password changed after a breach is one a scammer can’t reuse. Every credit freeze is a loan that can’t be opened in someone’s name. None of it is flashy. All of it is real, and nobody had to sit through a slideshow to do it.

We think that’s radical. We also think it’s just good security training.

— Multiverse Studios

Numbers cover September 7 – 24, 2026, from Reclaim City’s anonymous gameplay events on our own self-hosted analytics — no ad networks, no third parties, no accounts. Counts are actions, not people: someone who checked three accounts for breaches counts three times. We never see your passwords, your accounts or what you found beyond the answer you pick in the debrief. You can switch sharing off any time on the Your City screen.

Take back your city

Reclaim City is free, runs in your phone’s browser, and needs no account.

Play Now → More devlogs