Secure your Epic account beyond enabling 2FA

In brief

An Epic account is only as recoverable as the email and sign-in methods attached to it. Enable two-factor authentication, then inspect account connections and recovery access as part of the same job.

This protects purchases and progress without requiring you to hand your login to a “free V-Bucks” or giveaway website.

Set up a usable second factor

Choose an available method you can maintain. If using an authenticator, understand its backup or migration process before replacing your phone. Store any provided recovery information securely outside the same device. Do not share a live code with someone claiming they need it to verify a prize.

Inspect linked identities

Check connected platform accounts and remove an unfamiliar connection using Epic’s documented process. Avoid unlinking a legitimate console casually: progress and relinking rules can complicate recovery. Confirm which Epic account owns the purchases before making a change.

If you entered details on a suspicious site

From a trusted device, secure the email, change the reused or exposed password and use Epic’s sign-out-all-sessions route. Review purchases and connections, then contact official support if access or items changed. Keep evidence of the suspicious message without reopening its login link.

What to do next

1. Open Epic’s official account settings directly and secure the associated email account.
2. Enable an available 2FA method under account password/security settings and keep recovery options accessible.
3. Review connected accounts and sign out other sessions if you suspect access you did not authorize.