Your Epic Games account covers Fortnite, Rocket League, Fall Guys, the Epic Games Store, and every free game you've claimed. Enabling two-factor authentication (2FA) protects all of them at once — and unlocks Fortnite gifting plus free in-game rewards.
In This Guide
Free Rewards & Fortnite Gifting
Epic Games permanently requires 2FA to send or receive gifts in Fortnite — there's no way around it. Beyond security, enabling 2FA has historically unlocked exclusive rewards added directly to your locker. Check the Epic Games news page for current reward details.
The 2FA requirement also applies to Fortnite Creative and competitive tournaments — some events require 2FA to be eligible to earn prizes.
Method 1: Authenticator App (Recommended)
An authenticator app is the most secure option. It generates codes on your device that cannot be intercepted, even if your phone number is hijacked.
- Go to epicgames.com/account/password and log in
- Click Password & Security in the left sidebar
- Scroll down to Two-Factor Authentication
- Click Enable Authenticator App
- Epic will display a QR code and a manual entry key
- Open your authenticator app and scan the QR code, or paste the manual key
- Enter the 6-digit code shown in your app to confirm
- Save the backup codes displayed — store them securely
Method 2: Email Authentication
Epic will send a 6-digit code to your registered email each time you log in from a new device. This is easier to set up but slightly less secure if your email account is compromised.
- Go to epicgames.com/account → Password & Security
- Under Two-Factor Authentication, click Enable Email Authentication
- Epic will send a confirmation code to your email — enter it to activate
Make sure your email account also has 2FA enabled for the best protection.
Method 3: SMS Authentication
Epic can send codes via text message. SMS 2FA is better than no 2FA, but it's the weakest option — SIM swap attacks can intercept SMS codes. Use an authenticator app if possible.
- Go to epicgames.com/account → Password & Security
- Under Two-Factor Authentication, click Enable SMS Authentication
- Enter your phone number and verify with the SMS code Epic sends you
Backup Options
During authenticator app setup, Epic provides backup codes. Each code can be used once to log in if you lose access to your app.
- Save backup codes in a password manager (Bitwarden, 1Password)
- Store a printed copy somewhere physically secure
- You can regenerate backup codes from Account → Password & Security at any time
You can also have multiple 2FA methods active simultaneously — for example, both an authenticator app and email as a fallback.
Troubleshooting
I'm not receiving the Fortnite gifting option after enabling 2FA
Log out and back into Fortnite fully — the game needs to resync your account status. Also ensure both your account and your friend's account have 2FA enabled, and that you've been friends on Epic for at least 48 hours (this is a separate Epic requirement for gifting).
My authenticator code isn't accepted
Authenticator codes expire every 30 seconds. Make sure your phone's time is set to automatic/network time. If the clock is even slightly off, the code won't match what Epic's servers expect. On Android, go to Clock app settings and sync the time manually if automatic sync isn't working.
I lost access to my authenticator and have no backup codes
Contact Epic Games Support. You'll need to verify ownership of the account with details like your original email, linked payment methods, and console accounts. The process can take several days but Epic support is generally responsive.
I want to switch from email to authenticator app 2FA
Go to Account → Password & Security, disable the current email 2FA method, then enable the authenticator app option. You may need to enter an email code to confirm the change before the new method is set up.
Epic Games 2FA and Console Account Linking
Fortnite players on PlayStation, Xbox, and Nintendo Switch usually sign in through a linked console account rather than an Epic Games email login. Even so, 2FA is still required on the Epic Games account that owns your progress to unlock gifting and rewards. To check which account is your primary, sign in to epicgames.com and open Account → Connections; the linked console IDs are listed there. If you created multiple Epic accounts over the years, make sure you enable 2FA on the one holding your Fortnite progress and V-Bucks. Keeping the linked console account secure matters too, since anyone who compromises it can still reach your Epic account through that connection. Note that Epic may require you to verify your email address before 2FA codes can be delivered — confirm the address on file under Account → Account Info is one you still control.
Epic Games 2FA Security Tips
Always enable 2FA on the email address linked to your Epic account as well; if an attacker controls your email, they can reset your Epic password and receive the login codes sent to it. Use a strong password for Epic that you do not reuse elsewhere — credential stuffing against gaming accounts is extremely common. Be wary of any message claiming your account has been "banned" or offering free V-Bucks; Epic will never ask for your 2FA code outside the official login flow. If you currently use SMS 2FA, consider upgrading to an authenticator app, because phone numbers can be hijacked via SIM swapping. Finally, review the third-party app connections at epicgames.com/account/apps and revoke access for anything you no longer use, since a compromised third-party app can perform actions on your account.
Common Mistakes When Setting Up Epic Games 2FA
The most frequent error is enabling email authentication and calling it done — email 2FA is only as strong as the inbox it lands in, so if that inbox lacks its own 2FA, an attacker who reaches it controls your Epic codes too. A second common miss is choosing SMS and ignoring the SIM-swap risk entirely. Third is saving the backup codes inside a text file on the same computer you game on, where malware or a shared family PC can read them.
A quieter mistake is enabling 2FA on the wrong Epic account. If you have an old spare account from years ago, you may be securing that one while your Fortnite progress and V-Bucks sit on another. Sign in to epicgames.com, check Account → Connections to confirm which account holds your linked console, and enable 2FA there.
What to Do If Your Epic Account Is Hacked
Act immediately: change your password at epicgames.com, then open Account → Password & Security and confirm the email on the account is still yours — attackers change it to lock you out. Review Account → Connections and unlink any console or service you do not recognise, then check the payment methods stored on the account for anything unfamiliar.
If you are already locked out, use Epic's account recovery form with the details only you would know — the original sign-up email, purchase receipts, and linked console accounts carry the most weight. While you wait, be suspicious of any DM or message claiming to be Epic support offering to "help you recover faster"; Epic will never ask for your password or 2FA codes in a direct message.
A Walkthrough: Your First Sign-In After Enabling 2FA
With an authenticator app active, the next login from a new device goes: email and password, then the 6-digit code. The Epic Games Launcher asks the same way as the website, so there is no separate setup per app. After the first successful sign-in, the launcher stops asking on that PC until you log out or reinstall.
If you enabled 2FA mainly for Fortnite gifting, remember the extra requirement: the recipient must have been your friend for at least 48 hours, and both accounts need 2FA. The gifting option appears in the item shop once your account state refreshes — fully close and relaunch the game if you do not see it.
Epic Games 2FA Questions, Answered
Does enabling 2FA protect my payment methods? Yes — every purchase and account change requires the second factor, so a stolen password alone is not enough.
Can I use 2faco.com as my Epic authenticator? Yes: copy the manual key Epic shows during setup, paste it into the tool, and generate codes in the browser.
How do I get new backup codes? Account → Password & Security → Two-Factor Authentication shows the regenerate option at any time.
Do I need 2FA for Rocket League and Fall Guys too? No — one Epic account covers every Epic title, and one 2FA setup covers all of them.
Why is my authenticator code rejected on Epic even though it looks right? The most likely cause is a clock that has drifted on your phone. Set the device time to automatic, then retry with a freshly generated code.