eRepublik Insider Phishing Article forgot one VERY important fact.

Day 648, 08:46 • Published in USA USA • by AndraX2000

Yes, phishing is bad, and you need to be careful. However, some of the legitimate third-party sites need you to be logged-in to work. They do it in a safe and secure method by requesting that you log into eRepublik by forwarding you to an official eRepublik login page. This page is ALWAYS http://api.erepublik.com/login so check you browser address bar before entering in your password. If the address is EXACTLY http://api.erepublik.com/login then they are using the secure login that was created by the admins. The third-party receives a message saying that your password was correct, but they DO NOT learn what your password is.

In short, if you are logging in at http://api.erepublik.com/login then you are OK.

It really sucks that the admins left this out of the article, as it is making some people afraid to use legitimate tools.