Security training usually means a video you half-watch and a quiz you click through. Reclaim City does it differently. Every mission is a real thing you do to a real account — check it for breaches, change the password, turn on two-factor, pull your data back from a broker — and each one you finish takes back a building in a city the data brokers own.
We launched it on September 7th. Eighteen days later, here’s what players did.
Plus 5,535 audits of who’s logged into your accounts and from where — the check that catches the session you forgot about on a library computer.
Two-factor is the step security agencies tell everyone to take first, and the one almost nobody gets around to. Our players did it one thousand four hundred and forty-six times in eighteen days. Every one of those is an account that a leaked password alone can’t open anymore.
Most people know they should turn on two-factor and freeze their credit. Knowing isn’t the problem. Getting around to it is. Reclaim City turns each of those chores into a building you take back, and it’s honest about why it matters: the accounts are yours, and the breaches are real.
Eighteen thousand actions is eighteen thousand fewer open doors. Every password changed after a breach is one a scammer can’t reuse. Every credit freeze is a loan that can’t be opened in someone’s name. None of it is flashy. All of it is real, and nobody had to sit through a slideshow to do it.
We think that’s radical. We also think it’s just good security training.
— Multiverse Studios
Numbers cover September 7 – 24, 2026, from Reclaim City’s anonymous gameplay events on our own self-hosted analytics — no ad networks, no third parties, no accounts. Counts are actions, not people: someone who checked three accounts for breaches counts three times. We never see your passwords, your accounts or what you found beyond the answer you pick in the debrief. You can switch sharing off any time on the Your City screen.
Reclaim City is free, runs in your phone’s browser, and needs no account.
Play Now → More devlogs