TSxHost - Mythor (War Manager)

Guild security · Mythor

War Manager

A vault for the guild's war accounts: access by character, logged handoffs, and automatic cleanup of trusted devices whenever an account changes hands.

A war account is almost never just one person's. The strong char logs in with one member today, another tomorrow, and the password ends up floating around in TeamSpeak private chats — copied, pasted and forgotten in half a dozen people's message history. While everyone's on good terms, nobody cares. The problem shows up the day someone leaves on bad terms: that person doesn't need to break in anywhere, they already have the key.

What War Manager does

Keeps the guild's accounts in a single panel, with the password encrypted — nobody sees what hasn't been granted to them.
The admin decides, character by character, who can view and who can operate. New members don't start out with access to everything.
The account is handed over through the panel, not via a screenshot in a DM: who took it, which char and when all get logged.
Login and character switching happen through automation — the person plays without ever holding the password.
Every guild stays isolated from the others: one client can never see another's data.

R$ 200/ month, everything included

A war account belongs to the guild, not to whoever happens to be holding it today. War Manager starts from that principle.

On the Tibia website you can mark a device as trusted: on that device, login stops asking for the authenticator code. It's convenient for playing — and it's exactly the door left ajar when an account changes owners. The mark doesn't disappear by itself: it stays on the account until someone goes in and removes it. Whoever used the char before you may have left a way back in, and nobody notices until the day they use it.

What War Manager does about it

Treats the moment an account changes hands as a security event, not an act of trust.
Watches the handed-over character until the recipient's first login.
Once the login is detected, it logs into the account and removes all trusted devices, then double-checks.
Deletes the credentials as soon as the cleanup finishes — they don't stay stored for no reason.

Step by step, the way it actually happens

The instant someone copies the full account block in the panel, War Manager notifies the bot — that's the exact moment the account changes hands.
The bot opens a watch window on that character and waits for the first login, tracking live presence on the world.
Once the login is detected, it logs into the account, lists the trusted devices and removes all of them, then re-reads the list afterward to confirm it's empty.
Once the cleanup is done, the credentials used for that operation are deleted right away.
The result goes back to the panel: how many devices were dropped, on which account, and when.

Removes all of them, not just "the suspicious ones"

There's no guessing which device belongs to whom. The automation's own login doesn't mark a trusted device — there's no "ours" to preserve, and any clever "leave this one alone" rule would be exactly the rule that leaves the wrong person's device alive.

And if it goes wrong

It's not one attempt and give up: the cleanup restarts on its own, with retries spaced out across the window. If it still doesn't finish, the account gets marked as pending and a critical alert goes out to the team.

Changing the password is what everyone remembers to do. Removing the trusted devices is what almost nobody remembers — and that's exactly how the door stays open.

Mythor (War Manager)

War Manager

What War Manager does

What War Manager does about it

The layers

Mythor (War Manager)

R$ 200,00