Entry · Before you sign up
Accounts, double opt-in and the first launch
Reviewed 17 September 2026 · KR Ultimate s.r.o. editorial team
Quick answer
An online game account exists so the publisher can hold your progress on its servers and recover the account if you lose access. Double opt-in — registering, then clicking a link in a confirmation email — is the step that proves the mailbox is yours. Until it is done, most accounts cannot sign in, and a confirmation message sitting in a junk folder is the commonest reason a new player never reaches the game.
The sequence for a free-to-play online shooter is always some version of the same four steps: register, confirm, install, sign in. This entry goes through each one, then deals with what to do when a step fails, and finishes with the account-security questions worth settling on the first day rather than after a problem.
Why an account exists at all
In a single-player game bought outright, your progress lives on your own disk. In an online service it lives on the publisher's servers, because the same character, unlocks and purchases have to be available from any machine you sign in on and have to be authoritative in a match played against other people. That is the reason an account is compulsory rather than a convenience, and it is also why account recovery matters: without a verified email address, a lost password is very difficult to resolve.
A second, less obvious function is enforcement. Bans, matchmaking history and purchase records all attach to the account, which is what lets a publisher act against cheating and what makes an account worth something to somebody willing to steal it.
What double opt-in actually means
Single opt-in means giving an address and being taken at your word. Double opt-in means giving the address and then proving you can read mail sent to it, by following a unique link in a message delivered there. It is the standard approach for account creation and mailing lists alike, for three practical reasons: it stops one person signing up somebody else's address, it keeps invalid addresses out of the publisher's system, and it establishes a reliable channel for password resets and security notices.
From the reader's side, the important consequence is timing. The confirmation link is usually valid for a limited window, and accounts that are never confirmed are often cleared automatically. If you register and then get distracted for a week, expect to start again.
The registration sequence, step by step
- Choose the mailbox first. Use an address you can open on the computer you intend to play on. A work address is a poor choice, because access can disappear when a job does.
- Register on the publisher's own site. Type the address carefully; a mistyped domain is the single most common reason a confirmation message never arrives. Nothing about this step happens on StrataPoint — this site has no forms and collects nothing.
- Set a strong passphrase. Long and unique beats short and complicated. The Australian Cyber Security Centre publishes current guidance on passphrases and multi-factor authentication, and it applies to a game account exactly as it does to email.
- Open the confirmation message and follow its link. Check the junk and promotions folders before concluding it has not arrived. Confirmation is the step that activates the account.
- Switch on multi-factor authentication if it is offered. Do it during setup. It is a two-minute job that becomes a much larger one after an account is compromised.
- Install the client from the publisher's distribution. Not from a third-party mirror, an advertisement or a video description. Game clients run with substantial access to a computer, which makes provenance a security question rather than a preference.
- Sign in, let the remaining files download, and start. Expect the first run to take longer than the installer suggested; patches download on launch.
When a step fails
| Symptom | Usual cause | What to do |
|---|---|---|
| No confirmation email after several minutes | Filtered as junk, or a mistyped address | Search the whole mailbox for the game's name, including junk and promotions. If nothing, register again with the address typed slowly. |
| Confirmation link says it has expired | The link's validity window has passed | Request a fresh confirmation from the account page, then use the new link immediately. |
| “Address already registered” | An earlier attempt created an unconfirmed account | Use the password reset or resend-confirmation route rather than creating a second account. |
| Client will not install | Insufficient disk space, or security software blocking the installer | Free space first. If the block persists, download again from the publisher's own page and check the file is the one they publish. |
| Game launches, then closes immediately | Graphics drivers, or a conflict with anti-cheat software | Update graphics drivers, restart the machine, close overlay and tuning tools, then try again before contacting support. |
| Sign-in rejected although the password is right | Account not yet confirmed, or a region or maintenance issue | Confirm the account, then check the publisher's status or support page before repeated attempts, which can trigger a temporary lock. |
Fake confirmations and account theft
Because everybody expects a confirmation email during registration, that moment is a favourite for impersonation. A convincing message arrives, the link leads to a page that looks like the publisher's, and the credentials typed there go somewhere else entirely.
Two habits defeat nearly all of it. Confirm accounts from a link you were expecting, in a message that arrived within minutes of your own action — not one that turns up days later about an account “pending verification”. And sign in by typing the publisher's address yourself rather than following a link, whenever a message asks you to log in for any reason. Scamwatch, run by the National Anti-Scam Centre, publishes examples of current approaches and takes reports; the Australian Cyber Security Centre covers what to do if credentials have already been given away.
Signals that a “confirmation” message is not one
- It arrives long after you registered, or without you registering at all.
- It threatens deletion of the account unless you act immediately.
- The link's domain is not the publisher's, or is a shortened address hiding the destination.
- It asks for a payment detail as part of “verifying” a free account.
- It asks for a one-time code that was sent to you separately. Nobody legitimate needs that code.
What you hand over, and what happens to it
Registration for a game of this kind usually involves an email address, a password, a display name and, depending on the publisher, a date of birth. Payment details only enter the picture if you later choose to buy something. Where that information is stored, and under which country's law, is set out in the publisher's own privacy policy, and it is worth the five minutes it takes to skim before creating the account rather than afterwards.
For Australian readers, the Office of the Australian Information Commissioner is the privacy regulator and publishes guidance on how personal information should be handled and on making a privacy complaint when an organisation cannot resolve one directly. Its material is also the clearest available explanation of what rights of access and correction look like in practice.
StrataPoint itself is a different matter and a much shorter one: there is no form, no newsletter and no account on this site, and no cookie is set. What that means in detail is on the privacy policy and cookie policy pages.
If the account is for a child
Settle three things before registering rather than after. Whether the game's content is appropriate, which is a classification question and is dealt with in classification and parental controls. Whether online chat with strangers is enabled, and whether that is acceptable in your household; the eSafety Commissioner publishes practical guidance for parents and carers on exactly this. And whether purchases can be made from the account, which is a matter of platform-level controls and of whose payment method is stored.
Publishers set their own minimum ages and their own rules about accounts for younger players, so the terms of the specific game are the authority. An account created by a parent and shared with a child is a common arrangement and a reasonable one, provided the adult keeps the recovery email and the payment settings.
Closing an account later
Decide at the start how you would leave. Most publishers provide a deletion or deactivation route through account settings or support, and most treat deletion as final: progress and anything purchased go with it. If you might return, deactivation is usually the better option. Keep the registration email in a folder rather than deleting it, because it is the simplest proof of which address an account belongs to when support asks.
With the account settled, the remaining practical question is the machine. That is covered in desktop hardware, Windows, macOS and Linux, and the one product examined in detail here is described in the product profile.