How to reset your Epic Games password

Forgot your Epic Games password and got locked out of your account? No problem! There’s an easy way to reset the password and regain access. Here’s what you need to do:

1. Head to the login page on the Epic Games Store website or app.

2. Click on “Forgot password?”

3. Enter the email tied to your account to get a security code.

4. Check your email for the code, then enter it on the site.

5. Set up a new password that meets Epic Games’ security requirements, and click “Reset Password.”

6. Use the new password to sign in again.

How to change your Epic Games password

If you suspect that your Epic Games password isn’t strong enough or simply want to change it (as recommended every 6 months to ensure account security), you can quickly do so by following a few steps on the Epic Games Store platform. Here’s how:

1. Log in to your Epic Games account.

2. Go to the “Account Info” page and find the “Password and Security” section.

3. Enter your current password in the “Current Password” field.

4. Create a new password, then confirm it by retyping it in the second box.

5. Click “Save Changes.”

Best practices for creating a strong password

As mentioned earlier, a good habit is to change your passwords every 6 months, even if they’re strong. Why? Because regular updates make it harder for attackers to break in and access your accounts. So, if it’s been a while since you last updated your Epic Games password, now’s a great time to do it.

When creating a strong new password for Epic Games—or any other account—aim for at least 16 characters, mixing uppercase and lowercase letters, numbers, and symbols. Avoid using anything familiar, like phrases or personal information. The more random it is, the better.

And if creating and remembering such secure passwords sounds challenging, NordPass can help. It can generate strong passwords for you on the spot and store them securely in an encrypted vault that only you can access. With NordPass, you can log in quickly and securely to your Epic Games account without sacrificing security. Try it and see the difference it will bring to your online experience.

Frequently asked questions

What are the Epic Games password requirements?

Epic Games keeps its password requirements fairly simple: your password only needs to be at least 8 characters long, with at least one number and one letter, and no spaces. To better secure your account, though, we recommend that you go for a 16-character password that includes numbers, symbols, and a mix of uppercase and lowercase letters, all arranged randomly.

How often should I change my Epic Games password for security purposes?

It’s a good idea to change your Epic Games Store password, just like any other password, every 6 months to keep things secure. This makes it much harder for hackers to break in. And if creating complex passwords feels like a hassle, tools like NordPass’ Password Generator can handle it for you instantly.

How do I enable two-factor authentication (2FA) to protect my Epic Games account?

To set up two-factor authentication on your Epic Games account, all you need to do is just log in, go to the “Password & Security” section, and pick your 2FA method—an authenticator app, SMS, or email. This adds an extra layer of security by requiring a code from your chosen method each time you log in.

What should I do if someone else has changed my Epic Games password without my permission?

If you think or know for sure that someone has changed your Epic Games password without your consent, act quickly and follow these 3 steps to secure your account:

1. Reset your password using the Epic Games password reset page or the account recovery page.

2. Set a strong password for the email address linked to your Epic Games account.

3. Enable 2FA on your Epic Games account to add an extra layer of security.

First of all, what are passkeys?

Passkeys are a new, highly secure authentication method developed with the help of the FIDO Alliance. The goal is to help people log in to their accounts more safely and easily than with traditional passwords.

To achieve this, passkeys combine biometric verification (like your fingerprint) with cryptographic keys to provide a secure login option that can be activated with just a touch. Unlike passwords, passkeys can’t be guessed, making them resistant to phishing and brute-force attacks. That’s why they offer the perfect blend of security and convenience.

How to create a passkey for your PayPal account

Setting up a passkey for your PayPal account is a simple process that takes about 5 minutes. Here’s how to do it:

1. Go to PayPal’s Help Center, locate the section on passkeys, and open the link to the “Passkey Creation” page.

2. Log in to your PayPal account with your PayPal password.

3. Authenticate your device using your fingerprint, facial recognition, or device password.

4. Follow the on-screen instructions to complete the setup of your passkey.

How to log in to PayPal with a passkey

Once you create a passkey for your PayPal account, you can log in quickly and securely. Here’s how:

1. Launch the PayPal app and enter your email address on the login screen.

2. If you’re using the device you created the passkey on, it will automatically trigger the passkey login. If you’re on a different device, select “Other options,” then “Passkey from a nearby device,” and finally, scan the QR code displayed on your screen using the device with your passkey.

3. Unlock your device using your preferred biometric (Face ID, Touch ID), PIN, or password to complete the passkey login.

How to manage your PayPal account passkey

At any moment, you can review or remove the passkeys you’ve created for your PayPal account.

Review your passkey

You can easily review your passkeys by going to your account settings and opening the “Passkey Management” page. From there, you can disable, update, or remove any of the passkeys linked to your PayPal account.

Delete your passkey

To delete a passkey, follow these steps:

1. Go to the “Passkey Management” page.

2. Find the passkey you want to delete.

3. Click “Remove this passkey.”

4. Confirm the action.

Important: if you remove your passkey via PayPal settings, it won’t automatically be deleted from your device. So, to fully remove it, you’ll also need to go to your device settings and delete it there too.

Store and manage your passkeys with NordPass

If you’re looking to add even more security and convenience to your login experience, NordPass is the perfect tool to store and manage your passkeys. While it’s known as a password manager, NordPass also lets you create, store, and organize passkeys for all your online accounts, keeping everything safe in one place. You can even share your passkeys with others or use them alongside your current password for an added layer of protection with two-factor authentication (2FA).

Haven’t tried passkeys yet? Use NordPass to create your first ones and see just how easy and secure logging into your accounts can be.

Frequently Asked Questions (FAQ)

How do I know if a passkey is available for my PayPal account?

It’s easy to check if you can use passkeys with your PayPal account. Simply visit PayPal’s “Passkey Creation” page on your device and try to create a passkey. If the option isn’t available, you’ll be notified that passkeys are not currently available for use with your account.

How do I use my existing passkey for PayPal across all my devices?

If you’d like to log in with a passkey on a device other than the one where it’s stored, simply select the “Passkey from a nearby device” option during login and follow the prompts. However, to access your passkey across all your devices, you’ll need a solution like NordPass. It securely stores your passkeys in an encrypted storage, ensuring you can access them from any device.

It’s the end of the day and you’re ready to kick back and relax. You turn on your Xbox and are about to spend some quality time gaming. But all of a sudden you realize that you no longer remember your Xbox password. It can be a dreadful experience, but fear not!

There are a variety of ways to reset your password and get back to gaming in no time. In this blog post, we’ll explore the different methods for resetting and changing your Xbox password and provide step-by-step instructions to help you along the way.

Reset your Xbox password using your Microsoft account

One way to reset your Xbox password is via your Microsoft account. This method is quick and easy and can be done on any device with an internet connection. Here’s how:

1. Go to the Microsoft account recovery page on your web browser.

2. Enter the email address associated with your Xbox account and complete the CAPTCHA challenge.

3. Choose to receive a security code via email or phone number and enter the code when prompted.

4. Follow the on-screen instructions to reset your Xbox password.

Reset your password via the Xbox app

If you prefer to reset your Xbox password using your mobile device instead of your console, the Xbox app provides a simple solution. Here’s what you need to do:

1. Download and install the Xbox app on your device.

2. Open the app and tap “Sign In.”

3. Enter your Xbox-linked email address and select a verification method (email or phone) to receive a security code from Microsoft.

4. Enter the security code from your inbox to start the password reset process.

5. Create a new password and verify it.

Reset your password on the Xbox console

If you’re unable to reset your password using the Microsoft account or the mobile app, you can reset it directly on your Xbox console. These instructions are applicable to both Xbox One and the latest Series S and Series X consoles. Here’s how you do it:

1. On the Xbox sign-in screen, enter the email address associated with your Xbox account and click “Next.”

2. Select “I forgot my password.”

3. Now complete the CAPTCHA challenge.

4. In the “Show that you’re you” section, choose the security contact method—either an email address or a phone number—that you want Microsoft to send your security code to.

5. Check your email or phone inbox for the security code from Microsoft.

6. Enter the security code from your email or phone messages.

7. Now, create a new password and verify it.

8. Select “Done.”

Reset your password on the Xbox 360 console

If you’re still using an Xbox 360 console, resetting your password is a slightly different process. Here’s how to do it:

1. Select “Can’t access your account?” from the “Download profile” or “Sign in” screen.

2. Choose a reason why you’re having trouble signing in.

3. Enter your email address and the provided code to prove you’re not a robot.

4. Choose your security contact method (email address or phone number) and select “Send code.”

5. Check your phone, email, or authenticator app for the security code and enter it on the screen.

6. Enter your new password and confirm it.

How to change your Xbox password

If you want to proactively change your Xbox password for security reasons, you can do so through your Microsoft account or Xbox console. Here’s how:

1. Go to the Microsoft “Account” page and select “Sign in.”

2. Enter your Microsoft email address and select “Next.”

3. Select “Security” and then “Password security.”

4. Follow the prompts to create a new password.

How to change your password on Xbox 360

To change your password on an Xbox 360 console, follow these steps:

1. Press the Xbox “Guide” button on your controller.

2. Select “Settings” and then “Account management.”

3. Choose “Windows Live ID” and then “Change password.”

4. Follow the prompts to create a new password.

5. Your Xbox password will now be updated.

Store your passwords securely in NordPass

Now that you’ve reset your Xbox password, it’s essential to store it securely to prevent the need for frequent resets. That’s where NordPass can help. NordPass is a secure and easy-to-use password manager that provides a single secure place to store your digital valuables such as passwords, payment card details, personal information, and secure notes. One of the things that makes NordPass extremely handy is automatic sync between multiple devices, which means that you can access your passwords at any time, on any device. Even when you’re offline.

On top of that, NordPass comes equipped with a variety of security tools. With the help of a built-in Password Generator, you can quickly create a strong and unique password for all of your online accounts. Password Health — another handy feature — helps with identifying weak, reused, or old passwords, while the Data Breach Scanner allows you to check whether any of your personal information has been compromised in a data leak. 

Try NordPass today, and enjoy a smooth and secure online experience at all times.

How does a YubiKey work?

Simply put, the YubiKey is a security key developed by the FIDO Alliance and manufactured by Yubico. Each YubiKey device is assigned a unique code which, when plugged into a computer, can authenticate the user’s identity. In addition to the USB keys, NFC YubiKeys are used for authentication on mobile devices.

YubiKeys use cryptographic keys to authenticate login attempts. They support a number of MFA protocols, such as passkeys, one-time passwords, and Universal 2nd Factor (U2F), and help protect users from advanced man-in-the-middle attacks, where the malicious actor attempts to intercept two-factor authentication.

How to set up a YubiKey 

Unlike traditional passwords, YubiKey holders don’t need to remember a separate code to authorize a login attempt—the YubiKey works when plugged into or tapped against the device, and the user only needs to press a button to activate it. Similarly, to set up the YubiKey as an authentication device, the user only needs to choose it as their preferred option in the account security settings.

What services and applications support a YubiKey?

Although YubiKey authentication isn’t the most popular multi-factor authentication method, it’s broadly available for both personal and business use. It can be used to authenticate login attempts to websites, applications, and databases.

Everyday users can rely on YubiKeys to authenticate login attempts to social media and email accounts, and access sensitive data such as banking information or personal medical records. Services like Microsoft and Google not only support YubiKey authorization, but the tech giants behind them have contributed to the key’s development as a whole.

YubiKeys can work in tandem with password managers. The key can be used to add a layer of security to the password manager itself, while the credentials generated using the password manager can strengthen the first line of defense for the user’s accounts.

YubiKey’s popularity is growing, and the industry is seeing an increase in use cases for YubiKeys. These security keys have already become a favorite for many companies that seek out advanced employee security practices. FAANG companies are issuing employees with personal YubiKeys for work-related authorization, ensuring that all sensitive information can only be accessed by verified users.

YubiKey also adds flexibility for remote and hybrid workers. With a YubiKey, they can easily access databases and work accounts anywhere around the globe without risking unauthorized data exposure. Since YubiKeys don’t need any kind of connection to run, hackers cannot break into them as they would with open Wi-Fi networks.

What are the benefits of YubiKey authentication?

The YubiKey is considered one of the safest multi-factor authentication methods. Its compatibility with mobile and desktop devices makes it a flexible option for individuals and business users alike. The USB version is compatible with common ports found on hardware devices, like USB-C or Lightning, and most modern laptops are built with a designated security key dock.

The YubiKey is physically sturdy as it’s water- and crush-resistant, making it a reliable long-term investment into security. It does not require any third-party applications to operate, although additional applications can be used for custom configurations.

Whenever you log in to an account that uses YubiKey authentication, the key can detect the legitimacy of the website. It only validates the login attempt if the website matches the original link. This protects you from accidentally logging in to a spoofed website and revealing your credentials to cybercriminals.

There’s one caveat to carrying around your YubiKey for authentication. Due to its size, a YubiKey can be easy to lose. So, if you choose a YubiKey as your authentication device, make sure you store it in a secure location. Yubico officially recommends users have a backup YubiKey device that can be activated if the primary key is lost or stolen.

Even if you lose your YubiKey device, you don’t have to worry about any of your personal information being exposed, as the security key does not act as a storage device. If someone steals your YubiKey but doesn’t know your password, they still won’t be able to break into your account.

YubiKey vs. other authentication methods: how do they compare?

YubiKey is one of several alternatives that individuals and companies use as the next step of multi-factor authentication. Let’s see how YubiKey authentication compares to passkeys, third-party apps, and text message codes.

Passkeys

It’s not unusual to see passkeys mentioned alongside YubiKeys in discussions about MFA. Both authentication methods are the brainchildren of the FIDO Alliance, falling under the FIDO2 umbrella. Both offer a passwordless solution to account authentication and protection. And, of course, both are uniquely encoded.

The core difference between passkeys and YubiKeys is the hardware. Passkeys use a combination of biometric verification with cryptographic keys. The process is validated with a mobile phone, tablet, or laptop. Passkeys can also be stored in third-party password managers like NordPass and synchronized between devices at the user’s convenience.

YubiKeys act as passkey storage themselves, albeit with storage restrictions. YubiKey codes cannot be replicated or transferred to a different device, making them less flexible than passkeys.

Choosing between a passkey and a YubiKey comes down to the user’s preference. Both methods follow the FIDO2 protocol, making them strong authentication mechanisms for individuals and organizations.

Authentication apps

Authentication apps are another popular way to support MFA. Apps like Google Authenticator or the built-in NordPass Authenticator allow users to generate time-based one-time passwords (TOTPs) on their devices whenever they log in to a website or app. Codes generated by authentication apps are generally short, averaging 6 characters, and reset after a set period, usually between 15 to 60 seconds.

YubiKeys were initially built to produce highly complex, 44-character unique one-time passwords (OTPs) for account authentication. However, as the YubiKey technology has evolved, it has switched to passwordless authentication. While it’s still possible to produce the OTPs using a YubiKey device, WebAuthn is now the preferred authentication method.

Both authentication keys and YubiKey OTPs offer a similar level of convenience. They require a single device to generate codes and grant instant access. However, as a hardware device, the YubiKey is more resilient to breach attempts. Third-party authentication apps may be prone to cyberattacks or phishing attempts.

Consider a scenario where a scammer contacts a user and tries to extract the authentication code from them to break into their accounts. Upon seeing that the required authentication method is an app, they’d be more likely to carry on. After all, it’s easier to get a user to reveal a 6-digit code than a 44-digit one.

The time-based reset aspect adds a layer of reliability to authentication apps, as the timer makes it more difficult for cybercriminals to get around. The YubiKey authenticator adds extra haste by autofilling the authentication code as you press the button on your key, saving you the time of typing in all 44 characters.

SMS-based 2FA

Although SMS-based authentication is considered one of the weaker methods, it remains popular due to its ease of use. To set up SMS authentication, the user inputs their mobile phone number and receives a one-time password upon each login attempt.

Compared to YubiKey authentication, relying on text messages is pretty flawed. Phone spoofing and SMS swapping are popular social engineering tactics that aim to extract the authentication code sent to your number. In the former tactic, cybercriminals call their targets, pretending to be from a legitimate service, and ask for the SMS code for verification. For the latter, hackers call the target’s phone service provider, pretending to be the victim, to gain access to the number.

The YubiKey cannot be remotely overtaken by malicious actors. It’s an offline device that does not require an internet or mobile network connection. The ease of authentication without needing to reveal or input a one-time password ensures that user accounts are more resilient to phishing attacks.

The YubiKey can also protect your texting apps from within—it can connect to the phone via the USB dock or by using NFC to authenticate attempts to log in to these services. It also saves you the headache of updating all your accounts with SMS authentication if you change your phone number.

Combining your YubiKey with NordPass

Whether it’s for personal or work-related use, you want to maximize your account protection. Combining NordPass with a YubiKey makes it easy to leverage a higher level of security without making things complicated.

NordPass is a secure password manager that lets you generate strong and unique passwords, as well as store and manage passkeys for all your accounts. It uses zero-knowledge architecture and advanced XChaCha20 encryption to protect your sensitive data and keep all your credentials accessible in a vault that can only be accessed with your authorization.

As a member of the FIDO Alliance, NordPass understands the role that passwordless authentication will play in the near future. Lost access to your YubiKey? Don’t worry—switch your preferred authentication method to an authenticator app. From here, you can use the NordPass Authenticator to generate one-time codes along with your passwords. You can even use the YubiKey with your Nord Account, putting your digital security first.