Guide

How to Enable 2FA on Fortnite

Two-factor authentication (2FA) is required on your Epic Games account to send or receive gifts in Fortnite — no exceptions. It also unlocks exclusive free in-game rewards and protects your skins, V-Bucks, and account progress from being stolen. The whole process takes under two minutes.

Free Rewards & Fortnite Gifting

Epic requires 2FA to be active on your account before you can gift or receive any item in the Fortnite Item Shop. This is permanent — there's no way to enable gifting without 2FA. Alongside unlocking gifting, Epic has consistently rewarded players who enable 2FA with exclusive cosmetics added directly to their locker. Check epicgames.com/fortnite after enabling to see your current reward.

2FA is also required to participate in some competitive Fortnite tournaments and to be eligible for prize payouts.

How to Enable 2FA on Fortnite

Fortnite 2FA is managed through your Epic Games account on the web — you cannot enable it from inside the game. You only need to do this once and it covers Fortnite on every platform.

Method 1: Authenticator App (Recommended)

An authenticator app generates 6-digit codes on your device every 30 seconds. This is the most secure method because codes are created locally and cannot be intercepted via SMS hacking or SIM swapping.

  1. On any browser, go to epicgames.com/account/password
  2. Log into your Epic Games account
  3. Click Password & Security in the left menu
  4. Scroll to Two-Factor Authentication
  5. Click Enable Authenticator App
  6. A QR code and a manual secret key will appear on screen
  7. Open your authenticator app and scan the QR code — or manually enter the secret key
  8. Type the 6-digit code shown in your app into the Epic website to confirm
  9. Save the backup codes that appear — you'll need these if you ever lose your phone
No authenticator app installed? You can use 2faco.com right now — paste your Epic Games secret key into the browser and get your 6-digit verification code instantly. No download, no account, completely free.

Method 2: Email Authentication

If you'd rather not use an app, Epic can email you a code each time you log in from a new device or browser.

  1. Go to epicgames.com/account → Password & Security
  2. Click Enable Email Authentication
  3. Epic sends a confirmation code to your registered email — enter it to activate

This method fully unlocks gifting and rewards. However, if your email account is compromised, your Fortnite account is too — make sure your email also has 2FA enabled.

Method 3: SMS Authentication

Epic can text a code to your phone number instead. SMS 2FA unlocks gifting and is better than no protection, but it's the weakest of the three options since phone numbers can be hijacked via SIM swapping.

  1. Go to epicgames.com/account → Password & Security
  2. Click Enable SMS Authentication
  3. Enter your phone number and verify with the code Epic sends

Works on All Platforms

Because 2FA is tied to your Epic Games account rather than any device, enabling it once on the website protects your Fortnite account everywhere:

  • PlayStation 5 & PS4
  • Xbox Series X/S & Xbox One
  • Nintendo Switch
  • PC & Mac (Epic Games launcher)
  • Android & iOS (where available)

You will only be prompted to enter a 2FA code when logging in from a new device or browser — not every time you launch Fortnite.

Troubleshooting

I enabled 2FA but can't gift yet

Check these requirements — all must be true for gifting to work:

  • Your account must have 2FA enabled ✓
  • Your friend's account must also have 2FA enabled
  • You must have been Epic friends for at least 2 days
  • The item must be giftable (Battle Pass and some bundles cannot be gifted)
  • Log out and back into Fortnite fully to refresh your account status

My 2FA code isn't accepted

Authenticator codes expire every 30 seconds and are time-sensitive. Make sure your phone's clock is set to automatic/network time. If the time is even slightly off, the codes won't match. On Android, go to Settings → General Management → Date and Time → Automatic date and time. On iPhone, go to Settings → General → Date & Time → Set Automatically.

I lost access to my authenticator app

Use one of the backup codes you saved during setup — each one works as a one-time login. Once in, go to Account → Password & Security and set up 2FA again on your new device. If you have no backup codes, contact Epic Games Support with proof of ownership.

I didn't receive the free reward

Rewards are added automatically but can take up to 24 hours to appear in your locker. If it's been longer than that, log out of Fortnite completely and back in. If the reward still isn't there, check the Epic Games news page to confirm the current reward offer is still active.

Fortnite 2FA Security Considerations

2FA protects more than your locker — it protects the payment methods you use for V-Bucks and the personal data on your Epic account. Stolen Fortnite accounts are frequently resold or used for fraudulent gifting, which can get your account flagged or suspended. If you use SMS 2FA, upgrade to an authenticator app when possible: SIM-swap attacks are a real threat among gamers, and app-generated codes cannot be intercepted. Also secure the email address on your Epic account and enable 2FA there too, because password resets and login codes both depend on email access.

Common Fortnite 2FA Mistakes

The most frequent errors are choosing SMS as the only method, never saving the backup codes shown during setup, and enabling 2FA on the wrong account if you have several. Save the backup codes in a password manager and double-check that 2FA is active on the account that actually holds your Fortnite progress.

What to Do If You're Completely Locked Out of Your Epic Account

If your authenticator is gone and the backup codes were never saved, start Epic's recovery flow from the login page's contact link. Epic verifies ownership through a questionnaire about your account: the original email, the first display name, connected console accounts, and receipt details from any purchases. Answers that match your account history speed the process up considerably; guesses will slow it down or end it.

The fastest escape route is often a device that is still signed in. Fortnite on a console where you are already logged in, or a browser session on a PC, lets you reach Account → Password & Security and disable 2FA without any code. Do this before contacting support, because it turns a multi-day ticket into a five-minute fix.

While you wait, do not buy "account recovery" services from third parties — they cannot change Epic's process and they typically want your account credentials, which is exactly what an attacker would ask for. Epic's own support is the only legitimate path, and it is free.

2FA and Competitive Fortnite: Tournaments and Prize Payouts

Epic's competitive scene has used 2FA as an eligibility gate for years. To compete in official tournaments, your account must have two-factor authentication enabled before the registration window closes. Players have been disqualified or denied prizes for disabling 2FA after qualifying, so leave it alone during a competitive season.

Prize payouts also route through the Epic account, which means the payment and personal details on the account must match the competitor's real identity. A hijacked account is not just a cosmetic loss; it can delay or forfeit cash prizes and earn skins accumulated over months. Treat the account as the financial asset it is when you are competing.

A Real-World Scenario: What a Stolen Fortnite Account Actually Costs

Walk through the typical hijack: a player's email appears in a breach, the same password was reused for Epic, and the attacker signs in before the player notices. The account holds hundreds of pounds of skins, several Battle Passes' worth of earned V-Bucks, and years of cosmetic history that cannot be replaced. The attacker changes the email, enables their own 2FA, and starts gifting items to accounts they control before selling the account on the black market.

Epic's support can usually restore the account, but the player must prove ownership — a process that commonly takes days, during which every login attempt fails and friends who received the fraudulent gifts get flagged too. V-Bucks spent by the attacker are frequently not refunded, because Epic cannot always distinguish a stolen balance from a legitimate one.

The whole sequence is prevented by one decision: 2FA on the email address and 2FA on Epic, with backup codes saved. That is the difference between a scare and a weeks-long recovery saga, which is why the two-minute setup in this guide is the best value in Fortnite.

FAQ: Gifting, Rewards, and 2FA

My friend enabled 2FA but gifting still fails — what now? Both sides need 2FA, the friendship must be at least two days old, and the item must be giftable. Log out and back in on both accounts to refresh the status, and confirm the friend enabled 2FA on the same account they actually play on.

Do I need 2FA on my email too? Epic sends login codes and password resets to your email, so a compromised inbox can undo your Fortnite security. Enable 2FA on your email provider as well — it is the second lock on the same door.

Can I change from email to app-based 2FA later? Yes. In Password & Security, enable the authenticator app method and keep email active until the app method is confirmed with a code. Then disable email if you prefer — most players keep both for redundancy.

Related Articles