How to secure your EA Account

Setting up EA two-factor authentication step by step

EA's two-factor authentication (2FA) sends you a code whenever a new device tries to log in to your EA Account. You can receive codes by email, through an authenticator app, or by text message.

1. Go to your EA Account Security and Privacy page.
2. Scroll down and select Two-factor authentication.
3. Select Turn On.
4. Choose the Email, Authenticator app or Text Message tab. For an authenticator app, select Set up and follow the steps to connect it.
5. Select Send Code.
6. Enter the code sent to your email, app or phone to verify.

Later, you can manage methods from the same place: select Edit next to your verification methods to see them all, set a preferred method, and choose between enabled methods if your main one isn't available. EA recommends leaving 2FA on. If you ever need to switch it off, select Turn off at the bottom of the Two-factor authentication screen and confirm.

Backup codes are your only way back in from a new device

EA's help page includes one line that's easy to skim past: if you can't access your chosen verification method, backup codes are the only way to sign in to your EA Account from a new device.

That means losing your phone, changing your number or losing access to your email could lock you out of new devices unless you've saved them. As soon as 2FA is on, select View backup codes and write them down. Keep them somewhere separate from the device that receives your codes: printed and stored at home, or in a password manager you can reach from another device. Do it on the day you switch 2FA on, not on the day you suddenly need them, and check you can still find them every few months.

EA also says that if passkeys are available for your account, you should consider setting one up, because passkeys use your device's built-in security instead of a password. EA advises reviewing your security settings regularly so only trusted devices can access the account, and never sharing your login information, passwords, verification codes or passkeys with anyone.

EA's steps to resecure a hacked account

EA Help lists a short checklist if you think your EA Account has been hacked:

1. Clear your browser cache. This deletes saved web data that can include old passwords.
2. Reset your EA Account password to a strong, unique one with letters, numbers and special characters.
3. If you play on console, also reset your PlayStation Network, Xbox or Nintendo Account password.
4. Reset the password for your email address on the EA Account.
5. Turn on two-factor authentication.

EA then asks you to keep watching for suspicious activity and get in touch if something doesn't look right. The console step matters: if your EA Account is linked to a PlayStation, Xbox or Nintendo account, someone with access to that console account may also reach your EA games. Use our guides for PlayStation, Xbox and Nintendo to lock those down too.

Mobile EA games and linked Facebook, Google or Apple logins

Many EA mobile games are tied to another account rather than (or as well as) an EA Account. EA's advice is that if you think someone hacked your EA mobile game, the first thing to do is secure the account it's linked to:

• EA Account: follow the steps above.
• Facebook: use Facebook's security tips and Security Checkup.
• Google Play (Android): update your Google account's access and security settings.
• Game Center: secure your Apple account using Apple Support's guidance.

If you contact EA about a mobile game, have the game's ID ready. Mobile games also attract item and currency scams, so see our guides to free currency generators and account buying and selling.

A regular EA Account security check

EA's advice doesn't stop at switching 2FA on. It asks you to review your account security settings regularly so only trusted devices can access your account. A quick routine based on EA's own pages:

• Two-factor authentication. Open Security and Privacy, select Two-factor authentication and check it's on. Use Edit next to your verification methods to make sure your phone number or authenticator app is still current.
• Backup codes. Confirm you still know where your saved codes are. If you've used some or can't find them, get a fresh copy through View backup codes while you can still sign in.
• Passkeys. If EA offers passkeys on your account, consider adding one.
• Linked console accounts. Check your PlayStation, Xbox or Nintendo account still has its own two-step sign-in, since EA's own hacked-account steps include resetting those passwords.
• Email. Make sure the email on your EA Account has a strong, unique password.

If anything looks wrong during the check, such as content you didn't buy or remove, contact EA through EA Help rather than anyone who messages you offering help.

What to have ready before contacting EA Help

If you can't log in or content is still missing after resecuring, EA asks you to get in touch through EA Help. Gathering the right details first makes the conversation quicker. EA lists:

• The email address you used to make your EA Account.
• Any usernames or console IDs connected to it, such as Xbox gamertags or PlayStation Network online IDs.
• Invoice numbers from games bought from EA's store, or product codes for your games.
• For a mobile game, the game's ID.

EA is honest that it may not be able to recover all missing content such as packs, tokens or coins. Contact EA only through EA Help; anyone offering to recover your account or items for a fee is not EA. See fake support agents and our hacked account triage.