How to turn on two-factor authentication in Fortnite
Add an extra sign-in check to the Fortnite account your child already uses. Choose a method, finish setup and make a plan for a missing code or lost phone.
Open Password and security in the right Epic account, finish setting up an extra sign-in check and confirm it’s active. Make sure you know who can get the code and how to recover access.
- Use the account with your child’s progress and purchases.
- Choose a code or approval method the family can keep accessing.
- Chat and purchases still need their own controls.
- What to do now
- Find the existing account, check you can open its email inbox and complete the chosen sign-in method’s setup.
- Should I worry?
- This is a useful way to protect the account. Take a moment to plan recovery too, so a lost phone doesn’t leave you stuck.
- Settings that matter
- The active and primary methods; backup codes; access to the email inbox; security on the linked console account.
- If they’re asking because…
- they want to send a gift or enter an event, ask what they plan to do. Turning 2FA on doesn’t settle permission or every eligibility rule.
On this page
To add an extra sign-in check to your child’s Fortnite account, open Password and security in their existing Epic Games account. Choose a two-factor authentication method, finish the verification and check that it shows as active. You should also receive a confirmation email. Epic’s setup instructions show the official route.
Two-factor authentication, usually shortened to 2FA, asks for another check after the password, such as a code from an app or email. It helps protect your child’s account, including their progress and things you’ve paid for. Friends, chat and purchases still have their own controls.
For an 8–12-year-old, first agree on which adult will help when a code is needed or access is lost. You can set this up from a parent’s phone or computer. You’ll use the Epic account website, rather than searching Fortnite’s gameplay settings.
Find the account your child already uses
Epic Games is the company behind Fortnite. If your child uses a PlayStation, Xbox or Nintendo console, their console sign-in can be linked to an Epic account. Those two accounts may have different email addresses.
If your child plays on a console, sign out of any other Epic account in your browser, open Epic’s sign-in page and choose the button for that console. Sign in with the console account they play on, then check the account details before making changes.
An account created when your child first played on a console may still need its details completed. If you see an unfamiliar account or a request to finish setup, Epic’s console-account explanation can help. Leave the console linked while you work this out. Creating an unrelated account or unlinking the old one can leave the console without access to the original progress and purchases.
Before continuing, make sure you can open the Epic account’s email inbox and that the address is verified. Protect that inbox and the linked console account too; Epic 2FA won’t automatically add protection to their separate sign-ins. Epic’s account-security guidance covers those checks.
Choose a method the family can keep using
An authenticator is an app that provides or approves the extra sign-in check. Epic recommends using one. Choose a method the family can keep accessing when your child needs to sign in.
Epic Authenticator
Epic Authenticator is built into the Epic Games App and Epic Games Store App. You approve a sign-in by selecting the number that matches the prompt. Think about who will have the device and how they’ll recognise a sign-in they actually started.
Another authenticator app
You read a changing code from the app after connecting it to Epic. The adult helping with sign-ins needs access to it and a recovery option.
Epic sends a code to the account’s email inbox. Check that the inbox is secure and that you can get into it.
SMS
Epic sends a text message to the registered phone number. Choose a number the family will be able to keep using.
Epic’s method guide explains the choices and where SMS is available. Your child doesn’t need a personal phone just because text messages are one option.
If you haven’t used an authenticator before, Microsoft Authenticator is one of the apps Epic lists. Microsoft’s guide to adding an account includes installation help and an Other section for accounts such as Epic. Installing the app is the beginning: follow Epic’s prompts to connect the account, then enter the generated code back on Epic’s page to confirm it.
If the account is waiting for parental consent, Epic calls it a Cabined Account. SMS 2FA isn’t available in that state, but Epic lists email and an authenticator as alternatives. Use an available choice and complete the consent process with your child’s correct age. Epic’s Cabined Account guide explains the restriction.
Complete the setup, including recovery
- Open Password and security on the correct account.
- Find Two-Factor Authentication and choose Set up for your method.
- Follow the prompts, approving the app request or entering the code as asked.
- Check the active-method confirmation and the confirmation email. If you enable more than one method, use the three-dot menu to choose the primary one, the method Epic will normally ask you to use.
These steps follow Epic’s current setup guide. Stay with it until verification is complete; choosing Set up on its own won’t turn the protection on.
For an authenticator, save the backup codes Epic provides somewhere secure that you can reach without that same phone. They’re spare sign-in codes for when you lose access. Keep them private, including from anyone offering to “help” with the account. Epic’s authenticator/SMS lockout guide explains how to use them.
Make a note of the inbox and device you’ve used. Before replacing a phone or leaving an email address behind, update the method while you still have access. You might tell your child: “Ask me when you need a code. Neither of us will send one to somebody offering free items.”
What if the code or setting does not work?
If an email code hasn’t arrived, first check whether Epic is expecting an app or SMS code instead. Then check the right inbox and its spam folder, and give it a few minutes. Epic’s missing-code help has the next checks.
If an email or text code has expired, request a fresh one and use the newest message. If an authenticator code keeps failing, check that the phone’s date and time update automatically. Epic’s sign-in error guide can help with that.
If SMS isn’t available, try another available method or Epic’s SMS troubleshooting. If Password and security keeps asking you to verify yourself, use Epic’s verification-loop guidance. You don’t need to keep repeating the same unsuccessful step.
If you’ve lost the phone or authenticator, look for Try another way on the sign-in prompt and use an available email or backup-code option. If you can’t use those, start with Trouble signing in on Epic’s official sign-in page and follow its account-recovery guide. Epic may ask for more checks; a screenshot of the account alone doesn’t guarantee recovery.
Does enabling 2FA let my child send gifts or enter competitions?
Epic requires 2FA for gifting and competitive events, so your child may be asking for it to do one of those things. Gifting means sending an in-game purchase to another account. Ask what they want to do next: turning 2FA on doesn’t by itself mean they have your permission or meet every entry rule. Epic’s explanation gives the requirements.
Once it’s set up, check that you know which account is protected, where the next sign-in code will arrive and how you’ll recover access. Then use Epic’s parental-control guide for the separate choices about communication, content, purchases and time.
Official instructions checked 19 October 2026. MPC has not completed a hands-on setup test for this guide; no child account was changed while preparing it.
Sources and image credits
Questions parents ask
Does my child need their own phone?
No. Text messages are one option. You need reliable family access to the app, inbox or number you choose, which can be on a parent’s device.
Why can’t we choose SMS?
Text-message verification may be unavailable while a Cabined Account waits for parental consent, or because of regional support. Use an available method and the official help linked in the guide.
What if we lose the phone with the authenticator?
Look for Try another way and use an available email or saved backup-code option. If you can’t, follow Epic’s account-recovery guide. When possible, update the method before replacing a phone.
Does 2FA stop chat or purchases?
No. It adds a sign-in check. Communication, content and purchases have separate controls.
What this guide is built on
- websiteEpic: enable two-factor authentication
- websiteEpic: available authentication methods
- websiteEpic: securing your account
- websiteEpic: sign-in and recovery screenshots
- websiteEpic: Cabined Accounts
- websiteFortnite: 2FA reward
- websiteCover screenshot: Shannon / MPC, 25 October 2026Cover: Epic Games' seasonal Battle Royale loading artwork, captured by Shannon / MPC on Windows PC, 25 October 2026 at 11:45. This is loading artwork, not gameplay.