Account Security Guide

Account security and best-practices are the most effective ways to ensure the protection of a Destiny account's Guardians and their items. Please see the below recommendations to reduce risk of a Destiny account being compromised.

Real Name Security in Destiny Games

If a player wishes to prohibit others from seeing real names within a Destiny game, there are specific settings that must be checked:

Bungie Name PlayStation Xbox/Microsoft Steam Epic Games

Bungie takes players' personal information seriously. If a player finds that their personal information has been added to their Bungie Name and wants it removed, there are a few options that can be taken:

    1. View our Changing a Bungie Name section in this article and follow the outlined steps to choose a custom Bungie Name.
    2. Submit a Data Privacy Request, choose the "Correct My Data" option, and select "My Bungie Name..." to choose the default "Guardian" name.

From time-to-time, Bungie may send players a Name Change token inside Destiny 2 for players to alter their name if they are out of tokens.


Bungie.net Profile Security

Bungie.net accounts rely on PlayStation Network, Xbox/Microsoft, Steam, and Epic Games credentials. To ensure account security, please see the following recommendations:

    • Do not share account details with anyone. Bungie employees will NEVER ask for this information.
    • Use a different password and account security questions for each credential.
    • Ensure that any E-mail account tied to these credentials uses an alternate password as well.
    • Update passwords frequently.
For more detailed steps on updating credential passwords or increasing security, follow these links:

Additional Security Measures

Pass Keys for Xbox and PSN

Players that share a console with family members or roommates may also want to consider setting a password/passkey on their PSN or Xbox Live Profile:

2-Step Authentication

Additionally, players may want to set up 2-Step Authentication for their Steam, PSN, Xbox Live, or Epic Games accounts. For detailed instructions on how to do so, please see the following links:

Vital Information

Please see below for additional information player may need to know regarding account security.
    • NEVER give out your Password or Account Email to anyone. Bungie will never ask for this information.
    • NEVER click unknown links from untrusted sources.
    • Steam Play Proton: Destiny 2 is not compatible with Steam Play's Proton.
    • PlayStation Share Play: PlayStation players should exercise caution when using the Share Play feature. When using Share Play, the viewer in control of the game has access to all of the shared account's gear, items, and characters.
    • Character and Item Deletion Policy: Whether due to accidental deletion or unauthorized account access, Bungie does not recover manually deleted characters or items, and does not replace in-game items that are lost or dismantled. For more information, please see the Deleted Item and Character Policy.
    • Removing Accounts: For security purposes, Bungie is not able to remove connected platform accounts from Bungie.net profiles under any circumstances. You may want to contact your platform's support site for assistance in gaining access to the account in question.

Compromised Accounts

If you believe your account has been compromised, Bungie is unable to assist you. Please contact your platform’s support to receive assistance with potential account recovery options:

    • PlayStation - Phished (Compromised) Accounts
    • Xbox/Microsoft - Recover a hacked or compromised Microsoft account
    • Steam - What do I do if my Steam Account is stolen?
    • Epic Games Store - My Epic account was compromised and I cannot access it

For security purposes, Bungie is not able to remove connected platform accounts from Bungie.net profiles under any circumstances. However, we do recommend the following actions to take:

    1. Attempt to sign in to your account
    2. Change the password
    3. Set up two-factor authentication (2FA)
    4. Attempt to sign out of all devices 
    5. Check your account details and change anything you don't recognize
    6. If any other account has the same email address and/or the former password, we recommend updating those accounts and enabling 2FA