How to Secure a Bought Fortnite Account in 10 Minutes (Change E-mail, Password, 2FA)

To secure a bought Fortnite account, log in to the linked mailbox first, then change the e-mail on the Epic Games account to one you created, set a new password, sign out of every other session and enable two-factor authentication on your own device. Finish by reviewing connected platforms, authorised apps and saved payment methods. Done in that order, the whole process takes about ten minutes and removes every recovery path the previous holder had.

Key takeaways

• Order matters: mailbox first, e-mail change second, password third, 2FA fourth. Doing the password before the e-mail leaves the old address as a reset route.
• Use a brand-new e-mail address you created for this account, not your main personal mailbox.
• Prefer an authenticator app for 2FA over SMS or e-mail codes.
• Check connected accounts, apps and payment methods — these are the routes people forget.
• This guide is for Full Access and Mail Access accounts. A Not Full Access account cannot be secured this way; see the FAQ below.

Before you start: what you need (2 minutes)

Have three things ready before you open the credentials in your order chat:

1. A fresh e-mail address. Create it now on any provider you trust. It should be used for this Epic account only, with a unique password and, ideally, its own 2FA.
2. An authenticator app on your phone (Google Authenticator, Microsoft Authenticator, Authy or similar).
3. A password manager or at least a safe place to store the new credentials and 2FA backup codes.

Also check which access type you bought. If the product title says [FULL ACCESS], you have both the game login and the mailbox login. If it says [MAIL ACCESS], you have the mailbox and will set the game password yourself in Step 1. If it says [NOT FULL ACCESS], the mailbox is not yours, and Steps 2–4 will not be possible — that tier is play-only. Our comparison of Full Access vs Mail Access vs Not Full Access explains the differences in detail.

Step 1 — Log in to the mailbox and the game (1 minute)

Open the linked mailbox using the credentials from the order chat. Confirm it opens and that Epic Games messages are present or arriving. This is your proof that the recovery path is in your hands.

Then log in at the Epic Games account page. If you bought Mail Access and do not have the game password, choose "Forgot your password?", enter the account e-mail, open the reset link in the mailbox and set a password of your own. Now both logins are in your possession.

Take thirty seconds to glance at the locker in-game or via the account page and confirm it matches the listing. If anything is off, this is the moment to write in the order chat — you are inside the 48-hour check window and the account is still untouched.

Step 2 — Change the linked e-mail (3 minutes)

This is the step that actually transfers control. Everything else is reinforcement.

1. In the Epic Games account settings, open the general account information section and select the option to edit the e-mail address.
2. Epic will send a verification code to the current address — the mailbox you logged into in Step 1. Copy it over.
3. Enter your new e-mail address. Epic sends a second code to the new address; confirm it.
4. Check that the account page now shows your new address, then log in to the old mailbox one last time to confirm the change notification arrived.

Two things people trip over here. First, if the account already has 2FA enabled by the previous holder, Epic may ask for a 2FA code before allowing the change; the code will come to the old mailbox or the old authenticator, so if it is the latter and you were not given the codes, stop and report it in the order chat. Second, Epic applies its own rules to how often an e-mail can be changed — do it once, carefully, rather than testing with a throwaway address.

Step 3 — Set a new password and sign out everywhere (2 minutes)

Now that the e-mail is yours, change the Epic password in the Password & Security section. Use a long, unique password generated by your password manager; do not reuse the mailbox password.

In the same section, use the option to sign out of all sessions (Epic labels it along the lines of "Sign out everywhere"). This ends any session the previous holder may still have open on a PC, console or phone. You will need to log in again yourself, which is a good test that your new credentials work.

Finally, change the password on the old mailbox too if you intend to keep it, or simply stop using it. It no longer controls the Epic account, but it may still hold the account's history.

Step 4 — Turn on two-factor authentication (2 minutes)

Still in Password & Security, enable two-factor authentication. You will usually see three methods:

• Authenticator app — the strongest everyday option. Scan the QR code with your app and enter the six-digit code to confirm.
• SMS — convenient, but tied to your phone number and vulnerable to SIM swaps.
• E-mail — acceptable as a fallback, since the mailbox is now yours, but slower.

Choose the authenticator app as the primary method. Epic also provides backup codes when you enable 2FA; save them in your password manager. If the previous holder had 2FA enabled, disable their method first and then enable yours — otherwise their authenticator stays valid.

Step 5 — Review connections, apps and payments (2 minutes)

These are the quiet recovery paths that most quick guides skip.

Connected accounts

Open the Connections section and look at every linked platform: PlayStation Network, Xbox, Nintendo, Steam, Google, Apple, Twitch and others. Anything you do not own should be unlinked. Be aware that Epic applies cooldown periods to some platform links — a console account that is unlinked cannot always be relinked to a different Epic account straight away — so unlink only what does not belong to you and link your own platforms once.

Apps and accounts

The Apps & Accounts section lists third-party applications with permission to read the account. Remove all of them. You can always re-authorise the ones you actually use.

Payment methods

In the Payment Management section, delete any saved cards or PayPal connections that are not yours. This protects the previous holder as much as you, and it avoids confusion later if you add your own method.

Display name and parental controls

Change the display name if you wish (Epic limits how often this can be done). If a parental-control PIN is set that you do not know, ask for it in the order chat.

The ten-minute checklist

If something does not work

Three situations come up regularly, and each has a clear answer.

• The mailbox password is rejected. Do not attempt a mailbox recovery through the provider; write in the order chat with a screenshot. If the credentials cannot be fixed, the 48-hour window covers replacement.
• Epic asks for a 2FA code you do not have. Same rule: report it. A seller who enabled 2FA must provide the codes or the account is not usable as sold.
• The locker differs from the listing. Compare against the product page, not the marketing images of Fortnite itself. Random products guarantee only the stated minimum or category; a named-skin product must contain that skin. Report any genuine mismatch inside 48 hours.

One honest caveat applies to every account changing hands: publishers apply their own terms to accounts, and TeNET is an independent marketplace not affiliated with Epic Games. Securing the account the way described here removes the previous holder's access routes; it does not change Epic's rules, and no marketplace can promise otherwise.

How TeNET does it

Credentials for every purchase on TeNET's Fortnite catalogue are delivered in the order chat inside your TeNET account, usually within about an hour (the recent median is roughly 25 minutes) and within 24 hours at most. From delivery you have 48 hours to run through this checklist and report anything that does not match; we replace with an account of equal or higher value, and refund if no replacement is available, on top of the statutory two-year EU conformity guarantee. Because you receive digital content, the 14-day withdrawal right ends at delivery — you consent to this at checkout. Full details are in the refund policy and FAQ.

Full Access listings such as From 50 to 250 Fortnite Skins [Full Access] and Mythic Random [Full Access] include the mailbox login, so every step above applies. Payment is by card via Stripe (Visa, Mastercard, Apple Pay, Google Pay) or by crypto via Cryptomus. Support runs daily 9:00–23:00 CET through the order chat, support@tenetbuy.com or Telegram @tenet_com.

FAQ

Should I change the password or the e-mail first?

The e-mail. Until the linked address is yours, the old mailbox can reset any password you set. Change the e-mail, then the password, then enable 2FA.

Can I secure a Not Full Access account?

Not in this sense. Without the mailbox you cannot change the e-mail or reliably manage 2FA. Treat NFA accounts as play-only, do not add V-Bucks, and do not link your own console to them.

Which 2FA method is best for Fortnite in 2026?

An authenticator app. It works without a signal, is not tied to your phone number, and Epic supports it directly. Keep the backup codes somewhere safe.

Epic asks for a code sent to the old e-mail. Is that normal?

Yes. Epic verifies e-mail changes by sending a code to the current address first. That is why you log in to the old mailbox before starting.

What if the seller enabled 2FA and I do not have the codes?

Stop and report it in the order chat inside the 48-hour window. An account you cannot fully log in to does not match the listing and qualifies for replacement.

Once the checklist is done, the account is yours to play. If you have not bought yet, browse the Fortnite accounts on TeNET, pick a Full Access or Mail Access listing, and keep this page open for the first ten minutes after delivery.