Stay safe
How to turn on two-factor sign-in for Fortnite
Two-factor sign-in, or 2FA, asks for a code as well as your password when you sign in to your Epic account. It's the single best thing you can do to protect a Fortnite account, and it's needed for gifting.
Turn it on
- Sign in on Epic's website and open your account settings.
- Go to Password and Security.
- Under two-factor authentication, pick a method: an authenticator app, text message or email.
- Follow the steps to confirm. Keep the backup codes Epic shows you somewhere safe.
Which method is best?
| Method | How safe | Good for |
|---|---|---|
| Authenticator app | Best | Anyone with a phone |
| Text message | Good | If you don't want another app |
| OK | Only if your email has its own strong password and 2FA |
What it unlocks
- Gifting: you can't send gifts without it. See how gifting works.
- Competitive: tournaments require 2FA.
- Peace of mind: a stolen password isn't enough to get in.
Why it matters
Fortnite accounts are worth money to thieves, because some old skins can't be bought at all any more. Most stolen accounts start with a reused password or a fake login page. With 2FA on, the thief also needs your phone or your email, which stops almost all of those attacks.
If you lose your phone
Use one of the backup codes you saved when you turned 2FA on. If you don't have them, contact Epic's support from the email address on the account, and be ready to prove the account is yours. Don't trust anyone who offers to recover your account for a fee: Epic doesn't charge for support.
For parents
Use your own email or phone for a child's 2FA, so codes come to you. It means you'll know if anyone tries to sign in, and it pairs well with parental controls.
Other ways to protect your account
- Use a password you don't use anywhere else. A password manager makes this easy.
- Protect your email. Whoever controls your email can reset your Epic password, so give it 2FA too.
- Never sign in through a link in a message. Type Epic's address yourself.
- Check linked accounts. In your Epic settings, remove any console or app connection you don't recognise.
- Don't share your account. Even with a friend. Shared accounts are the easiest to lose.