To enable 2FA for Fortnite, sign in at epicgames.com/account/password, open the Password and security section, select Set up next to the method you want, and enter the code Epic sends you. Two-factor authentication lives on your Epic account rather than on a console, and turning it on unlocks the Boogie Down emote and lets you send gifts and enter Fortnite competitive events. You can choose Epic's own authenticator, a third-party authenticator app, SMS or email.
We checked every step here in November 2026 against Epic's help articles on enabling 2FA, the available 2FA methods, the rewards for turning it on, getting back in when you are locked out, and securing an Epic Games account.
Why Fortnite Players Turn It On
Two-factor authentication adds a second step to signing in, so someone who learns your password still cannot get into your account without the code from your second factor. For Fortnite specifically, Epic's 2FA article lists three things that require it:

- Sending gifts from the Fortnite Item Shop.
- Taking part in Fortnite competitive events, such as tournaments and cups.
- Claiming some free games on the Epic Games Store.
There is also a reward. Epic's rewards article says securing your account with 2FA unlocks the Boogie Down emote in Battle Royale. If you own Save the World, you also receive 50 Armory Slots, 10 Backpack Slots and one Legendary Troll Stash Llama.
The practical case is just as strong. A Fortnite account can hold years of purchases, and every outfit in it is tied to one login. If that password leaks because you reused it somewhere else, the second factor is what stops a stranger from signing in with it.
Turning On 2FA, Step by Step
The whole process runs on Epic's website, and it works the same whether you play on PC, console or mobile. Epic's help article lays it out like this:
- Sign in to your Epic Games account and go to the Password and security section at epicgames.com/account/password.
- Under Two-Factor Authentication, select Set up next to your preferred method.
- Enter the code sent to you by email or SMS, or shown in your authenticator app, depending on the method.
- Your account page updates to show the method as active, and Epic sends a confirmation email.
Console players need one extra check first. Epic's rewards article says the console account must be connected to your Epic Games account, and if you have more than one Epic account, 2FA has to be enabled on the one you actually play Fortnite on. If you have only ever signed in on a PlayStation, Xbox or Switch, sign in to Epic's website with that console account so you are securing the right one.
You can add more than one method. If you do, Epic lets you mark one as primary: select the three dots next to it and choose Make my primary 2FA method. Having a second method set up is a cheap insurance policy against losing access to the first.
Which 2FA Method to Pick
Epic's methods article lists four options. All of them satisfy Fortnite's requirements, but they are not equally strong or equally convenient.

- Epic Authenticator: built into the Epic Games app and the Epic Games Store app. At sign-in you approve a number-match prompt by tapping the matching number.
- Third-party authenticator app: an app such as Google Authenticator, Microsoft Authenticator, Authy or LastPass Authenticator generates a code you type at sign-in.
- Email: a security code goes to the email address on your Epic account.
- SMS: a security code is texted to your phone. Some regional phone numbers are not supported, and in that case you will see a message saying SMS to this region is not supported.
Epic's account security guide is direct about the ranking: using an authenticator app provides the strongest protection. Email codes are only as safe as your email account, and texted codes depend on your phone number staying in your hands. If you pick email anyway, put 2FA on the email account too, because anyone who gets into that inbox can receive your Epic codes.
A sensible setup for most players is an authenticator app as the primary method with email as a backup. That gives you the strongest day-to-day protection while keeping a fallback if your phone breaks.
Claiming the Boogie Down Emote
Boogie Down should appear in your locker after 2FA is active, but Epic's rewards article warns that rewards may not appear immediately. If it is missing, restart Fortnite before anything else. If it is still missing, check the usual account mix-ups:
- 2FA was enabled on a different Epic account from the one you play on.
- Your console account is not connected to the Epic account where you turned 2FA on.
- You are signed in to a child's Cabined Account, which Epic notes can have different features depending on how a parent set it up.
Boogie Down is an Epic-rarity emote introduced in Chapter 1 Season 4, and it is unlocked by turning on 2FA rather than by spending V-Bucks. Our best emotes guide covers where it ranks among the rest.
Backup Codes and Getting Back In
A replaced or lost phone is the problem to plan for. Epic's lockout article describes two ways back in if your authenticator app is gone, your phone number has changed, or someone else turned on 2FA for your account:
- Email verification: at the 2FA prompt, choose Try another way, select Email Verification and enter the code sent to your inbox.
- Backup codes: when you set up an authenticator app, Epic provided backup codes. At the prompt, choose Try another way, select the backup code option and enter one 8-digit code.
Write those backup codes down or store them in a password manager the day you set up 2FA. They are one of the two routes Epic's article lists, and they are only useful if you can find them.
If your number changes while you still have access, update it before you lose the old one. In Password and security, use the three-dot menu to remove the current SMS method, select Set Up, enter the new number and confirm the texted code. Once you are back in after any lockout, Epic recommends turning 2FA straight back on rather than leaving the account unprotected.
Beyond 2FA: The Rest of Account Security
2FA is the biggest single step, but Epic's guide to securing your account lists several others that matter for Fortnite players:
- Use a password you do not use anywhere else, ideally generated and stored by a password manager.
- Verify your email address and keep an email you expect to have long term, since losing it makes recovery hard.
- Turn on 2FA for linked accounts too, such as Xbox, PlayStation, Nintendo, Facebook and Google, because those logins can open your Epic account.
- On shared computers and consoles, do not let the device save your login, and log out when you are done.
- Ignore offers of free V-Bucks or items from unofficial sources. Epic says it never asks for your password by email, message or third-party site.
One setup deserves a closer look: signing in with Google or Facebook. Epic's guide points out that while you are logged into one of those services, you can reach your Epic account without a separate Epic password, so your Fortnite locker is only as safe as that Google or Facebook login. If that is how you sign in, the unique password and 2FA advice applies to those accounts first, and turning on Epic's own 2FA on top adds the second layer for the Epic side.
Scams aimed at Fortnite players often start with a promise of free V-Bucks or skins and end with a request for your login on an outside website. Epic's guide says official offers only appear on the Epic Games Store, official Epic websites or verified Epic social channels, and that you should never enter login details on external sites. Our free skins guide lists the giveaways that are actually real this season, which makes the fake ones easier to spot.
The same guide also states that Epic's Terms of Service prohibit buying, selling or sharing accounts, that doing so may lead to restrictions or bans, and that you are responsible for everything that happens on your account. Keep that in mind before handing your login to anyone. Once 2FA is on, you can also start sending gifts, and our gifting guide covers the other requirements. Competitive players will want our ranked ranks explainer too, since reaching higher ranks is how you qualify for Epic's tournaments.
Starting Fresh on a Second Account
Some players set up a second account for a sibling, a different platform or a clean start. The store's Fortnite Full Access Account listing is a full access account with the email included, and its page tells you to change the credentials after delivery; the listing names PC, Xbox and PlayStation. If you go that route, treat day one as a security checklist: a new unique password, 2FA on the Epic account, and 2FA on the email account that came with it.
Weigh Epic's position on account trading, quoted above, before you decide. The store's Fortnite hub lists its other options for the game, including V-Bucks and skins.
Frequently Asked Questions
How do I turn on 2FA for Fortnite on PS5 or Xbox?
Epic's instructions run through its website. Sign in with the Epic account linked to your console at epicgames.com/account/password and set up a method under Two-Factor Authentication.
Why did I not get Boogie Down after enabling 2FA?
Rewards can take a little while, so restart Fortnite first. If it is still missing, 2FA is probably on a different Epic account, or your console account is not connected to it.
Do you need 2FA to play Fortnite tournaments?
Yes. Epic lists taking part in Fortnite competitive events among the things that require two-factor authentication, alongside sending gifts.
Is SMS or an authenticator app better for Epic 2FA?
Epic's security guide says an authenticator app gives the strongest protection. SMS works, but some regional numbers are not supported and it depends on keeping your number.
What if I lose the phone with my authenticator app?
At the 2FA prompt choose Try another way, then use email verification or one of the 8-digit backup codes Epic gave you when you set up the app.
Can you turn off 2FA on Epic later?
Yes, from the same Password and security page, but gifting and competitive entry stop working without it, and Epic recommends keeping it on.