Your whole locker
Skins, emotes, Battle Pass progress and V-Bucks are all on the Epic account. Someone who gets in can spend the V-Bucks, and if they turn on their own 2FA you are locked out until you prove ownership.
Fortnite account security
Fortnite account security: 2FA, backup codes, linked consoles and recovery
Your Fortnite locker does not live on your console. It lives on your Epic Games account, together with your V-Bucks, your Rocket League and Fall Guys progress, and your Epic Games Store library. This page collects what Epic’s own help pages say about keeping that account yours, in the order you should act on it.
Last checked against official sources on November 1, 2026.
Fortnite account facts at a glance
Each row links to the Epic Games page it comes from.
- Account you sign in with
- An Epic Games account. Fortnite, Fall Guys and Rocket League progress and purchases are stored on it, not on the console. Source
- 2FA methods
- Epic Authenticator (tap the matching number in the Epic Games App or Epic Games Store App), a third-party authenticator app, email codes, or SMS. SMS is not available for every region’s phone numbers. Source
- Where to turn it on
- Password and security in your Epic account settings, opened in a web browser. Source
- Backup codes
- 8-digit codes Epic gives you when you first set up 2FA with an authenticator app. Any one of them gets you past the 2FA prompt. Source
- What needs 2FA
- Sending gifts in Fortnite, Fortnite competitive events, the Support-A-Creator program, and claiming some free Epic Games Store games. Source
- Reward for turning it on
- The Boogie Down emote. Epic says it is granted right away. Source
- When Epic asks for a code
- The first sign-in after you turn 2FA on, on a new device, after more than 30 days without signing in, or after you clear your browser cookies. Source
- Players under 13
- Under 13, or under the local age of digital consent if that is higher, the account is a Cabined Account until a parent consents. Chat, real-money purchases and SMS 2FA are switched off. Source
- Buying, selling or sharing accounts
- Against Epic’s Terms of Service and results in an account ban. Source
Lock down your Fortnite account in 10 minutes
Step 1
Secure the email address first
Epic sends password reset links, account change notices and 2FA codes to the email on your account, so whoever controls that inbox can take the Epic account too. Give the email its own strong password and turn on its 2FA before you touch Epic’s settings.
Step 2
Use a password you use nowhere else
Epic asks for a password that is unique to your Epic account, because passwords leaked from other sites are reused against it. Epic already rejects common passwords and ones found in public breaches, but only a unique one keeps you off credential-stuffing lists.
Step 3
Turn on an app-based 2FA method
Open Password and security, click Set up next to Epic Authenticator or Authenticator App, and confirm with the code. Email codes are better than nothing, but they only protect you as long as the email is safe.
Step 4
Save the 8-digit backup codes the moment they appear
Epic shows backup codes when you set up an authenticator app. They are your way back in if the phone breaks or gets lost. Keep them somewhere other than that phone, such as a password vault or a printed copy at home.
Step 5
Check every linked console
Open Linked accounts in your Epic settings and make sure every PlayStation, Xbox, Nintendo and Steam account listed is yours. If someone linked an account you do not own, unlink it, then open an Epic support ticket and secure the account.
Step 6
Write down how you would prove the account is yours
If the account is ever stolen, you will need to show Epic it belongs to you. Note the original email, your display name, every linked console username and a few purchase receipts now, while you still have access.
What is riding on one Epic login
Three games, not one
Rocket League and Fall Guys progress and purchases sit on the same Epic account as Fortnite, along with any games you claimed on the Epic Games Store.
Every console you play on
PlayStation, Xbox, Nintendo and Steam accounts all link to this one Epic login. Unlink the wrong one and that console starts over on a brand-new, empty account.
A younger player’s settings
On a Cabined Account, SMS 2FA is off until a parent finishes the account setup, so pick an authenticator app or email method for a child’s account instead.
Which Epic 2FA method should you pick?
Epic offers four methods. Epic Authenticator is built into the Epic Games App and the Epic Games Store App: when you sign in, you tap the number that matches the one on screen. A regular authenticator app such as Google Authenticator or Microsoft Authenticator shows a code you type in instead. Email and SMS send a code to your inbox or phone.
Email is the easiest to set up and the weakest, because it is only as safe as the inbox. SMS is not supported for some regional phone numbers, and it is switched off on Cabined Accounts. For most players an app-based method is the strongest option.
You can turn on more than one method. Pick your primary one from the three-dot menu next to it. Keeping email switched on as a second method gives you a fallback through Try another way if your phone is gone.
Lost the phone with your authenticator?
Epic lists three reasons people get locked out by 2FA: they lost the authenticator app, they changed phone numbers, or someone else turned on 2FA on their account. The first two have a self-service way back in.
At the 2FA prompt, click Try another way. You can have a code sent to your email instead, or choose the backup code option and enter one of your 8-digit backup codes. Once you are in, go to Password and security to remove the old method and set up the new phone. Epic recommends switching 2FA back on straight away.
If 2FA is enabled on your account and you did not do it, treat it as a takeover: change your password, check the email on the account, and follow the hacked account steps.
Scams that go after Fortnite players
Epic’s advice is simple: do not trust offers of free V-Bucks or free games, especially ones that ask you to sign in on an outside site. Real offers only show up in the game, on the Epic Games Store, or on Epic’s own websites and social channels, and Epic staff will never ask for your password.
- Free V-Bucks generators. There is no generator. The site exists to collect your Epic email and password, or to push you through “verification” surveys.
- Look-alike sign-in pages. A link in a DM, comment or video description that asks for your Epic login is a phishing page until proven otherwise. Type epicgames.com yourself instead.
- Accounts for sale. Buying, selling or sharing an Epic account breaks Epic’s Terms of Service and gets accounts banned, so a bought “stacked” account can disappear with your money.
- A 2FA email you did not trigger. A confirmation that 2FA was turned on, or a security code you did not request, means someone has your password. Change it now and review Password and security.
Linked consoles: the mistake that empties lockers
Epic strongly discourages unlinking a console account. Your progress and purchases stay safe on the Epic account, but that console can no longer reach them. If you then launch Fortnite on the unlinked console, Epic automatically creates a new, empty Epic account for it, which is why people think their skins vanished.
After an unlink, your Epic account can stay restricted to the old platform account, which stops you linking a different one until you follow Epic’s steps to change the linked platform. A console account that is already linked to another Epic account has to be unlinked from that one first.
Running more than one Fortnite account
Lots of households run a second account for a sibling, a Creative project or a fresh start. Every one of them needs its own email address, its own password and its own 2FA. Decide which Epic account each console belongs to before you link anything, because switching later runs into the linking restriction above.
Keep every account one you made yourself. Epic bans accounts that are bought, sold or shared, and that includes handing your login to someone to level the Battle Pass for you.
What to keep on your Fortnite vault card
A good card answers every question you will have on a new console and every question Epic support might ask if the account is ever taken.
- The Epic email you sign in with, and your display name (friends see the display name; you sign in with the email).
- The password, plus which 2FA methods are on and which one is primary.
- The 8-digit backup codes, crossed off as you use them.
- Every linked PlayStation, Xbox, Nintendo and Steam username.
- When you created the account, and receipts for V-Bucks, Battle Passes or Fortnite Crew.
- For a child’s account: that it is a Cabined Account, and the parent email that gave consent.
Every Fortnite and Epic guide on LoginScout
How to make a Fortnite account Official Epic signup on PC, PlayStation, Xbox and Switch. How to enable 2FA on Fortnite Every Epic 2FA method, set up step by step, plus the Boogie Down emote. Recover a hacked Epic Games account What to do when the password or email was changed. Fortnite account hacked and skins gone What Epic can and cannot put back in your locker. Email changed to rambler.ru? What that change means and the recovery steps that follow. Unlink an Epic account from a console Read this before you press Unlink. New season account checklist Five checks before a new Fortnite season drops. Fortnite name generator Display name ideas that fit Epic’s rules.
Questions people ask
How do I turn on 2FA for Fortnite?
Sign in at epicgames.com, open Password and security, and click Set up next to Epic Authenticator, Authenticator App, SMS or email. Enter the code, and Epic emails you a confirmation. It protects the Epic account you play Fortnite with on every platform.
What do I get for enabling 2FA in Fortnite?
The Boogie Down emote, which Epic says is granted right away. Epic’s 2FA announcement also lists 50 Armory slots, 10 Backpack slots and a Legendary Troll Stash Llama for Save the World players.
What are Epic backup codes and how do I use one?
They are 8-digit codes Epic gives you when you set up 2FA with an authenticator app. At the 2FA prompt, click Try another way, choose the backup code option, and type one in. Treat each code as single-use and cross it off once you have used it.
Why does Fortnite keep asking for my 2FA code?
Epic asks again on a new device, after more than 30 days without signing in, and after you clear your browser cookies. If it keeps asking on the same device, our Epic 2FA loop guide walks through the fixes.
Can a child’s Cabined Account use 2FA?
Yes, with an authenticator app or email. SMS 2FA stays switched off on a Cabined Account until a parent completes the account setup from the email Epic sends them.
Can LoginScout recover a hacked Fortnite account?
No. Only Epic Games can restore an Epic account. LoginScout keeps the details Epic will want, like your original email, linked consoles and receipts, so the request is easier to make.
Sources
Checked against these official pages on November 1, 2026. Platforms change their settings and menus often. If something here no longer matches what you see, email [email protected] and we will fix the page. LoginScout is independent and not affiliated with the companies named here.
- Epic Games: Two-factor authentication (2FA) and how to enable it (epicgames.com)
- Epic Games: Which 2FA methods are available (epicgames.com)
- Epic Games: Authenticator app or SMS 2FA has locked me out (epicgames.com)
- Epic Games Safety: Account security (safety.epicgames.com)
- Fortnite: 2FA and the Boogie Down emote (fortnite.com)
- Epic Games: Unlinking a console account (epicgames.com)
- Epic Games: External account linked to another Epic account (epicgames.com)
- Epic Games: Cabined Accounts FAQ (epicgames.com)
Related guides
Account security for every game Account security hubs for Fortnite, Roblox, Minecraft, Valorant and more. Gaming password manager A vault built for game and service logins you own. 2FA code generator Generate TOTP codes from a setup key, right in the browser. Where every platform keeps 2FA backup codes Where each gaming platform keeps its backup codes, and how to store them.
Keep the identity with the login.
Create a free vault, then upgrade for a private temp mailbox and burner numbers when the library grows.