Over 250 million people rely on an Epic account for access to Fortnite, the Epic Games store, and the Unreal Engine, so Epic Games is enhancing the security protecting them with more password checks and 2FA options.
The account system Epic Games uses across all of its products became much more popular when Fortnite launched. The total number of accounts now exceeds 250 million, so Epic is upgrading the system with more two-factor authentication (2FA) options and enhanced password monitoring.
Epic is keen to point out that the Epic account system has never been compromised, but with so many data leaks occurring, some individual accounts have been accessed by a third party simply because people use the same email/password combinations on multiple services. With that in mind, 2FA and password monitoring are being enhanced.
2FA is already offered as both email authentication and app-based authentication (via apps such as Authy and Google Authenticator). Epic recommends using the app-based solution because email is only as secure as your email security. The plan is to now add SMS text message authentication, but no date has been forthcoming as to when that will happen.
There’s a lot of leaked passwords out in the wild, so Epic started monitoring email and password combinations to see if they already leaked. If an Epic account is found to be using leaked login credentials, the account will be automatically locked and a password reset required on next login. This feature is also being upgraded to take full advantage of the Have I Been Pwned list of leaked logins. It should mean many more leaked passwords are caught on account sign-up.
It’s currently possible to manually verify a new Epic account via email, but this is set to become a mandatory step in the near future. It will make creating a fake account in someone else’s name that little bit harder to achieve.
Taken as a whole, Epic accounts are getting much more secure and anyone who already has one, or is about to sign up, should take full advantage of the extra protections as they arrive. For selecting your password, though, be sure to take advantage of a password manager which also does a great job of generating secure new passwords for you.