How to help manage your EA Account security and safety

Thursday, March 9, 2023

We take account safety seriously. Here are some tips to help make your password and other information more secure.

We take your security seriously

We want to make sure your account stays secure. If you need to contact us about your account, we'll need to verify who you are and who owns your account. Please have your account info handy so we can help you. This process can take a little time, but it’s important to keep your account secure and in your control.

Create a strong, unique password

Weak passwords are easy to guess. Use our tips to make a more complex password:

Use 8-16 characters and at least one upper and lower case letter.
Use a combination of letters, numbers, and special characters.
Use different passwords for all of your online accounts, particularly your EA Account, console login, and email. If you use the same password for all accounts and one of them is compromised, then all of your accounts are at risk.
Do not use any information in your password that someone can get easily (like your Xbox Live gamertag/ PlayStation™Network Online ID, squad names, your name, date of birth, and so on).
Delete any emails that have password information (after you write it down in a safe place).
Change your passwords periodically.
- If you need to reset your password, reset it here for your EA Account.

Use EA Login Verification for extra protection on certain EA services

Turn on Login Verification through your EA Account security settings menu.

Login Verification can help prevent anyone other than you from gaining access to your EA Account. Whenever you try to access your account information or log in to select EA games and services from a new device, you’ll be asked for a verification code.

We can send the codes to you by email or text message. The faster way to get your code is by using the app authenticator.

We suggest writing down your backup codes once you set up Login Verification. Keep those codes in a safe place.

Use trusted devices

Trusted devices are a great way to get into your games quickly, and they also help make sure your account stays yours. By logging in on trusted devices, you’ll know where and when you’ve accessed your account.

The list of trusted devices for your account is compiled once you turn on Login Verification. No devices will be considered trusted if you don't have Login Verification turned on.

When you log in to your account, check the box for Remember this device on the screen where you enter your Login Verification code to make that device a trusted one.
You can check out the trusted devices on your account by viewing your security settings. You can also remove any trusted devices that you don’t use often.
Check your trusted devices list regularly for any suspicious activity, to make sure you’re the only one logging in.
If your account does get hacked, you can remove any trusted devices that you didn’t log in to yourself.

And to keep your trusted devices safe:

Mobile devices - use passcodes and lock your screens when you aren’t using them.
PC and Mac - use a password for your computer and make it a good one.
Consoles - set up passwords for your console accounts to make sure you’re the only one gaming on your profile. This is good if you share your console with other people.

Mind where you play

When we talk about trusted devices, we usually mean devices that you own and manage. They can also be devices that you play on a lot where you know and trust the person that owns them.

If you’re logging into your EA Account to play a game in an internet café or other location where many people are using the same device, be aware that other people could have installed software that you don’t know about on that device. That can be anything from keyloggers that can put your account security at risk, to cheat software that can get you banned or suspended from your game. When you log into your EA Account from a device like this, you’re playing at your own risk.

Add a secondary email to your EA Account

A secondary email helps you reset your password if you’re locked out of your EA Account and primary email address.

Find the Secondary Email section of your EA Account Security tab.
Click Add Secondary Email.
Enter an email address different from the one registered to your EA Account.
Log in to that email address and find the security code email sent from EA.
Enter your security code in the EA Account settings verification window.

Don’t share your info with anyone

It might seem like a no-brainer, but if you give out your password or any other account info then you’re putting your account at risk. Help keep your account secure by making sure you’re the only one with access to it.

Not sure if it’s real or if it’s phishing?Check out our tips on how to avoid phishing.

EA will never ask for your login information

There are no exceptions to this rule. Even if you get an email that appears to come from us, it’s a scam if it asks for your account information.

EA forum administrators will never ask for your account information

If you get a private message on our forums asking for your account information, it’s not us. Scammers may use names that sound legitimate, like “EA Admin” or “FIFA Developer.”

We will never ask you for your account details. If you get a message like this, report it to a forum moderator.

EA will never contact you through your console messaging system for any reason

If you get a private message through your console’s online messaging system claiming it’s us, asking for your account information, it’s fake. We will never contact you through your console’s messaging system for any reason, so do not give out your details. Report the details of this message via Xbox Live and PlayStation™Network.

Here are some extra tips for your overall online safety:

Use public computers with caution

If you log in from a public computer, such as at a school or a coffee shop, double check that the browser doesn’t save your login information. Delete the browser cache after you log out, too.

Make use of trusted browser tools

Many browsers have built-in phishing filters. These browser tools and plugins won’t stop all phishing sites, but they can help you avoid sites that will try to install malicious software on your computer.

Google safety diagnostic - You can check a website’s security with the Google Safe Browsing tool.
Web of Trust - This plug-in is available for all operating systems. It uses a stoplight-style rating system to warn against unsafe sites. It will display an icon next to your browser's address bar, clickable links, and search engine results.

Keep your antivirus and malware protection up-to-date

Viruses and malware (malicious software) can be harmful to your account security and can allow someone else to gain access to your account, user names, passwords, and other important information. Sometimes they’re so sneaky you won’t even know that there is malware or a virus on your computer.

With a little caution, you can help protect yourself against malware and viruses.

Use an antivirus/malware scanner. These programs can detect and remove any potential threats to your computer’s security.
Make sure you have the latest updates for your computer and software.
Avoid clicking links or opening websites that you don’t recognize, even if they appear to come from people you know via email, instant messages, or in-game messages. It’s possible that their account was used by someone else in an attempt to phish information or put malware on your system.
Avoid any sites promising level ups, XP, in-game currency, and more. These sites may put malware or viruses on your system or might try to steal your account information by asking you to log in. Trying to get these things without earning them yourself in-game is also considered cheating and can lead to various consequences for your account.

Don’t post your data online

Be cautious when sharing your data with anyone. Even sharing screenshots from your game on social media can reveal personal details you did not mean to make public.

Change your password immediately. Your account may have already been compromised, but you might still have time to save it.

Contact us and give us as much detail as you can. Our team will need information about what items (if any) you have lost, plus the date and time that you lost them. You can reach an EA Advisor for assistance even if you cannot access your account.

Let us know the site information, too. We take action against phishing sites when we learn of them. The info you give us helps make sure other players don’t get harmed by them in the future.