Epic Games enabling 2fa on all free games

[xYosemite]

Epic Games has just announced, around 15 minutes ago, on Twitter that 2fa will be required to claim free games from May 21. They claim that it's for "account security" but it's pretty clear it's for scripts. I am guessing this will render the script obsolete or do you guys think that there could be a work-around?

source: https://www.epicgames.com/store/en-US/news/two-factor-authentication-required-when-claiming-free-games?sessionInvalidated=true

[ghost]

bruh this repo caused it

[Revadike]

bruh this repo caused it

I doubt that. Perhaps somebody with a massive botnet using this library caused it.

[ghost]

I doubt that. Perhaps somebody with a massive botnet using this library caused it.

well still happened because of this

[facundopanizza]

I've been reading the two-step authentication methods. You can use an email so I don't think it has to be much of a problem, you can probably read the email by modifying a script, if someone feels like it.

[facundopanizza]

i'm going to try something tomorrow

[lupohan44]

i'm going to try something tomorrow

or you can simply use 2fa code

[lupohan44]

i'm going to try something tomorrow

https://www.npmjs.com/package/node-2fa

[ProximalPod]

Hell, maybe it'll trigger less captchas this way haha. I run it once a week and it still doesn't work sometimes because of the captchas

[facundopanizza]

i'm going to try something tomorrow

https://www.npmjs.com/package/node-2fa

wow i didn't know about that repo, is a better idea!

Hell, maybe it'll trigger less captchas this way haha. I run it once a week and it still doesn't work sometimes because of the captchas

ahaha true

[xYosemite]

I don't know node but I am still very interested in seeing if this project finds a way to bypass this or if anyone else does. The node-2fa package seems a little viable? Considering it'll work for Google Authenticator and Epic Games' 2fa accepts it.

update: Just read that it also accepts email like @OnigiriFest has said, could work if a script is made to read any emails by Epic

[lupohan44]

I don't know node but I am still very interested in seeing if this project finds a way to bypass this or if anyone else does. The node-2fa package seems a little viable? Considering it'll work for Google Authenticator and Epic Games' 2fa accepts it.

update: Just read that it also accepts email like @OnigiriFest has said, could work if a script is made to read any emails by Epic

but you don't know what email we are using

[Revadike]

Well, the library I use already supports 2fa: https://epicgames-client.kysune.me/Client.html#enabletwofactor-type-twofactorcode
I just have to figure out how exactly to implement it in my script.
However, I'm currently occupied with another issue: SzymonLisowiec/node-epicgames-client#87

[lupohan44]

Well, the library I use already supports 2fa: https://epicgames-client.kysune.me/Client.html#enabletwofactor-type-twofactorcode

then problem solved

[capito27]

btw, @Revadike, about a month ago or so, I implemented OTP support on your script (i couldn't be bothered to push it to my repo).
If you want to have a look at it, feel free :
https://github.com/capito27/epicgames-freebies-claimer/commit/ff10710488ecf732e362749c50dc48a2bddfe104
now, to update my script to upstream for it to work again

Edit : I also updated my fork to the upstream version 1.3.0, if that matters

[lingsamuel]

PR: #19
2FA Secret can be found in the QR-code page when you are enabling 2FA. If you already enabled 2FA, disable and re-enable it, a new secret will be generated and display.

[Revadike]

Wanted to close this, but actually, I'll leave it open, as there is still some things to do:

• Fully test the purchase flow with 2fa
• Update readme with 2fa secret obtaining method
• More testing in general

[chaoscreater]

Following lingsamuel's instructions, I disabled 2FA and re-enabled it and got the 2FA secret. Added it to my config and tried. All the script did was login to my account and logged out. It wasn't able to claim GTA5 (which requires 2FA).

2020-05-15 | 13:22:21.535 | WARN | Failed to claim Grand Theft Auto V (Error: Unknown quick purchase status: false)

[Revadike]

Following lingsamuel's instructions, I disabled 2FA and re-enabled it and got the 2FA secret. Added it to my config and tried. All the script did was login to my account and logged out. It wasn't able to claim GTA5 (which requires 2FA).

2020-05-15 | 13:22:21.535 | WARN | Failed to claim Grand Theft Auto V (Error: Unknown quick purchase status: false)

That's related to #22

[Revadike]

This is no longer relevant since it uses device auths now