LoginScout
Sign up free

Call of Duty account security

Call of Duty account security: Activision 2FA, backup codes, linked platforms and PC checks

Call of Duty ties your play to an Activision account, from Warzone to Modern Warfare 4. Your PlayStation, Xbox, Steam or Battle.net account just links to it, and in cross-progression games your progress is stored on the Activision side. So the Activision login is the one to protect. This page collects what Activision’s support pages say right now about 2FA, linking, phone numbers, PC security checks and bans.

Create a free vault Gaming password manager

Last checked against official sources on November 1, 2026.

Call of Duty account facts at a glance

Each row links to the Activision or Call of Duty page it comes from.

Account you sign in with
An Activision account. Games with cross-progression store progress on it, not on your platform account. Source
2FA methods
Authenticator app (Activision names Authy, Duo Mobile, Google Authenticator and Microsoft Authenticator), SMS, or email. Activision recommends the app. Source
Backup codes
Ten single-use codes when you set up an authenticator app, also sent by email. SMS 2FA has no backup codes. Source
New accounts
2FA is mandatory for accounts created after August 18, 2026. They start on email 2FA, which cannot be switched off. Source
SMS on free-to-play PC
Required on any PC platform account that does not own a Call of Duty title released in the last two years. Source
Platforms you can link
Xbox (including Game Pass and Microsoft Store), PlayStation, Steam, Blizzard, Nintendo and Ubisoft. One account per provider. Source
Unlinking
Each platform once every 12 months. Accounts with an active enforcement may be restricted from unlinking. Source
Changing the email
Once every 12 months, and only with authenticator app or SMS 2FA turned on. Source
PC security checks
TPM 2.0 and Secure Boot are required to play Modern Warfare 4, Warzone and Black Ops 7 on PC. Source
Selling or sharing
Transferring or selling accounts violates Activision’s Terms of Use. The owner answers for anything done on a shared account. Source

Secure your Activision account before your next Warzone drop

  1. Step 1

    Use an email address you will keep

    Activision warns against work or school addresses, because losing the inbox can block account changes and even logins. It also emails you a security challenge whenever you link an account or change credentials.

  2. Step 2

    Set a long, unique password

    Activision passwords can be 8 to 30 characters, and Activision recommends using all 30. Never reuse one from another site or game.

  3. Step 3

    Turn on authenticator app 2FA

    Open the Privacy & Security tab, go to Two-Factor Authentication and select Enable in the Authenticator App row. Add Activision to your app, enter the 6-digit code and your password, then select Activate.

  4. Step 4

    Store the ten backup codes away from the phone

    Activision shows them after setup and also emails them with the subject “Two-Factor Authentication Enabled”. Each works once, and Activision says to keep them off the device running your authenticator.

  5. Step 5

    Make the app your primary method

    If email or SMS 2FA is on too, open the three dots in the Authenticator App row and select Set As Primary Method.

  6. Step 6

    Audit your linked accounts

    Open Linked Accounts. If an account is not yours, unlink it and update your password. Each unlink uses that platform’s once-a-year allowance, so leave alone anything you will want back.

What one Activision login controls

Progress on every platform

Cross-progression keeps your progress on the Activision account, so whoever holds the login holds your progress on PC and console alike.

Your standing in future games

Active enforcements follow the Activision account to every linked device, and permanent bans can reach past, present and future Call of Duty titles.

Your PC’s online access

Hardware bans attach to the device, not the account, and can stay on a machine after the person who earned them moves on. Activision says to be careful with secondhand, borrowed or shared PCs.

A way back in through your platform

A linked PlayStation, Xbox, Steam or Battle.net account can sign you in to fix a forgotten password or a dead email. Nintendo and social accounts can be linked but cannot be used to log in.

Which Activision 2FA method should you use?

Activision offers three methods and recommends the authenticator app, because the codes are generated in the app and refresh every 30 seconds. It lists four supported apps: Authy, Duo Mobile, Google Authenticator and Microsoft Authenticator.

SMS and email work, with catches. Once SMS 2FA is on, you cannot switch it off from your profile, and SMS has no backup codes. Email 2FA turns on automatically when you verify your email and cannot be disabled at all. You can still add the app on top and make it primary.

New phone and no way to move the app data? Sign in with a backup code, then in the Authenticator App row choose Disable Method and Enable it again on the new phone. You get ten fresh backup codes. Run out of codes and you have to contact Activision Support.

Warzone on PC and the SMS requirement

Activision requires SMS 2FA on accounts used by free-to-play PC players, aimed at cheating and the illicit account-selling market. It applies to any PC platform account that does not own a Call of Duty title released in the last two years, checked per platform. Own the newest game on Battle.net but play Warzone through Steam, and you only need SMS on the Steam side.

Existing players are asked for a text-enabled number the next time they launch Warzone, and new accounts created in game must verify one before they can play. Email 2FA does not replace this requirement.

Pick the number carefully. Changing it means a request to Activision Support, which can be denied after suspicious activity, during an active enforcement, or after frequent requests. Free-to-play PC players who do not verify the new number are blocked from playing.

Linking and unlinking platforms: the 12-month rule

To link, sign in to the platform account and your Activision account in the same browser, open Linked Accounts and select Link Account. Activision emails a one-time code to confirm it is you, then sends you to the platform to finish.

Each Activision account takes one account per provider, and each platform can be unlinked only once every 12 months. Link a platform to a different Activision account and your progress does not follow, though relinking it to the original account brings it back.

One older page disagrees. Activision’s account security tips, last updated in October 2025, still say to unlink and relink everything after a break-in. With the newer once-a-year limit, unlink only the accounts you do not recognize.

For Battle.net players on PC, Blizzard adds two notes: a Call of Duty profile can have only one linked Blizzard account, and unlinking and relinking can corrupt Season Pass, DLC and other entitlements. Blizzard Support also says it cannot help with Activision linking or an Activision authenticator.

TPM 2.0 and Secure Boot on PC

Activision requires TPM 2.0 and Secure Boot to play Modern Warfare 4, Warzone and Black Ops 7 on PC. In Black Ops 7 and Warzone, a PC that fails the check loses access to some modes, including Ranked Play, and may only be matched with other players who also fail it. In Modern Warfare 4 it cannot play any online mode.

The baseline: Windows 10 version 22H2 or later, or any Windows 11; an Intel 8th Gen or newer CPU with Intel PTT, or an AMD Ryzen 2000 series or newer with fTPM; UEFI boot mode, not Legacy; and a GPT disk, not MBR. Activision’s Secure Attestation Wizard checks it all, and tpm.msc in the Run box shows “The TPM is ready for use” when TPM is on.

Activision warns that wrong UEFI or BIOS changes can stop a PC from booting, so follow your motherboard maker’s steps. Treat any download that asks you to switch these protections off as a red flag.

Cheat sellers, unban services and other Call of Duty scams

Activision’s own rules make most Call of Duty scams easy to spot.

  • Paid unban services. Activision overturns a permanent ban only if the infraction came from the account being hacked. Temporary bans, limited matchmaking and hardware bans cannot be appealed, and Activision does not respond to appeals sent outside its Appeal a Ban page. An outside “unban” has no place in that process.
  • Report-spamming tools. Activision says its system counts only one report from a player against another, despite what cheat developers claim when selling report-spam software. Malicious reporting is itself penalized.
  • Camo and unlock services. Activision tells players to avoid tutorials and services that modify camos or other content. Altering memory on your console or PC to get gear counts as cheating.
  • Free COD Points and leveling offers. Activision warns these sites and services break its Terms of Use and can lead to a compromised account and exposed personal information.
  • “Support agents” in your DMs. Activision asks players to use official support channels only, and warns that unofficial ones can lead to account fraud.

Modern Warfare 4 and Warzone: account notes for this year

Modern Warfare 4 launched on October 23, 2026 for PlayStation 5, Xbox Series X|S, PC and Nintendo Switch 2, with no PlayStation 4 or Xbox One version. Starting with Season 1, Warzone carries Modern Warfare 4 content and seasonal progression, and Warzone on PlayStation 4 and Xbox One stops being playable.

Verifying the email on your Activision account also earns the Locked Down Weapon Camo for Modern Warfare 4 weapons in Modern Warfare 4 and Warzone. Activision’s claim page is callofduty.com/verify-email.

What to keep on your Call of Duty vault card

Most Activision support questions come down to proving the account is yours. A LoginScout card keeps that proof and the codes below together, encrypted on your device.

  • The Activision login email and your Activision ID.
  • Which 2FA methods are on, which one is primary, and which authenticator app you used.
  • The ten backup codes, crossed off as you use them.
  • The phone number used for SMS 2FA, and a note that changing it needs a support request.
  • Every linked platform account, and the date you last unlinked each one.
  • Receipts for games and COD Points, with the platform each was bought on.

Every Call of Duty and Activision guide on LoginScout

How to make a Call of Duty account Create the Activision account and link your platforms. Recover a hacked Activision account Activision’s recovery request and the proof to have ready. Battle.net Authenticator for PC players Protect the Battle.net login you launch Call of Duty from. Recover a hacked Battle.net account If the Battle.net side was taken instead. Backup codes on every platform Where Activision’s ten codes fit next to every other platform’s. Gamertag generator Name ideas for a console account or a fresh Activision ID.

Questions people ask

What 2FA methods does Activision support?

Three: an authenticator app (Activision names Authy, Duo Mobile, Google Authenticator and Microsoft Authenticator), SMS, and email. Activision recommends the app, and with more than one on you pick a primary method.

How many Activision backup codes do I get?

Ten, when you set up an authenticator app. Each works once, and they are also emailed to you. Resetting 2FA on a new phone gives you ten new ones; if you use them all, contact Activision Support.

Why does Warzone on PC ask for my phone number?

Activision requires SMS 2FA for free-to-play PC accounts that do not own a Call of Duty title from the last two years on that PC platform. It is checked per platform, so owning the game on Battle.net does not cover Warzone on Steam.

Do I need TPM 2.0 and Secure Boot for Call of Duty?

On PC, yes, for Modern Warfare 4, Warzone and Black Ops 7. Without them you cannot play online in Modern Warfare 4, and you lose modes like Ranked Play in Black Ops 7 and Warzone.

Can someone pay to get my Call of Duty ban removed?

Not through any outside service. Activision reviews appeals only through its Appeal a Ban page and overturns permanent bans only when the infraction came from a hacked account. Temporary and hardware bans cannot be appealed.

Can LoginScout recover a hacked Activision account?

No. Only Activision can, through its Hacked Account Recovery request. LoginScout keeps your login, backup codes and linked-platform notes in one encrypted place, so the proof is ready when you need it.

Sources

Checked against these official pages on November 1, 2026. Platforms change their settings and menus often. If something here no longer matches what you see, email [email protected] and we will fix the page. LoginScout is independent and not affiliated with the companies named here.

Related guides

Account security for every game Account security hubs for Fortnite, Roblox, Minecraft, Valorant and more. Overwatch account security This game’s 2FA, backup codes, recovery path and scams in one place. Authenticator codes in LoginScout Authenticator codes saved beside the login they belong to. Gaming password manager A vault built for game and service logins you own.

Keep the identity with the login.

Create a free vault, then upgrade for a private temp mailbox and burner numbers when the library grows.

Create free vault See pricing