How to Secure a Valorant Account After Buying

The moment a Valorant purchase is confirmed, lock it down in this order: secure the included email inbox, change the Riot account email to one you own, set a new password, turn on multi-factor authentication (MFA), and sign out of all other sessions. Whoever controls the account email can reset the password, so that inbox is the master key. Skip the email step and the previous owner keeps a permanent way back in.

Why the email is everything on Riot

Riot accounts, which cover Valorant as well as League of Legends and TFT, are recovered through the registered email address. Whoever controls that inbox can trigger a password reset. So the security of a bought account hinges on two things: taking over the original inbox, and then moving the Riot account to an email only you control. Do both within the first hour of receiving the account. Our Riot account recovery guide explains how the reset flow works, and why controlling the email defeats it.

Step 1: Secure the inbox and change the Riot email

Log into the included email first and change its password, so the seller loses access to it. Then sign in to your Riot account settings at account.riotgames.com and change the account email to an address you own. Riot sends a verification step to confirm the change, which is why a proper purchase includes the original email login. Our step-by-step guide to changing your Valorant email walks through it. If the seller didn't provide email access, that's a red flag: contact the marketplace's support before going further.

Step 2: Set a new, unique password

Once the email is yours, change the Riot password immediately; the seller knew the old one. Use a long password (16 characters or more) that you don't use anywhere else, so a leak on another site can't be reused against you. A password manager such as Bitwarden, 1Password or Dashlane can generate and store it. Never base it on the game, your username or an old password.

Step 3: Turn on multi-factor authentication

In the same account settings, turn on multi-factor authentication. Riot's MFA can deliver sign-in codes through the Riot Mobile app, an authenticator app (such as Google Authenticator or Microsoft Authenticator) or your email. The app-based options are the strongest, because they don't depend on the inbox. Riot also hands out in-game rewards for keeping MFA on. Protect your email account with its own authenticator-app 2FA too, so the whole chain is covered. Our guide to enabling 2FA on your game account has the details.

Step 4: Remove leftover access and sign out everywhere

• Remove any phone number or sign-in method you didn't add yourself, then add your own.
• Sign out of all sessions from the account settings, so any device the seller still had signed in is logged out, then sign back in yourself.
• Restart the Riot client and confirm you're the only active session.

Step 5: Check linked accounts and the region

• Console and social links: if the account has an Xbox, PlayStation or social login attached, remove any you don't own. Each one is an alternative way to sign in.
• Region: the account belongs to one server, and Riot handles region changes only through support for players who have moved. Confirm it matches where you play.
• Vanguard: Riot's anti-cheat must be installed and running to play on PC. Make sure it's up to date.

Security checklist at a glance

Step	Action	Why it matters
1	Secure the inbox; change the Riot email to your own	Closes the seller's password-reset route
2	Set a new, unique password	Invalidates the credentials the seller knew
3	Turn on MFA (app-based if possible)	Blocks sign-in without your second factor
4	Remove leftover methods; sign out everywhere	Ends active sessions and old recovery options
5	Remove unknown links; confirm the region	Strips alternative logins; avoids a region mismatch

Keep your proof of purchase

Save your order confirmation and receipts. If there's ever a problem, a timestamped record of the purchase helps with the marketplace's support. Buying through a marketplace also means the platform keeps a transaction record, one more reason a protected purchase beats a direct deal. Our how it works page shows BuyAccount's escrow-backed handover, and our checklist of what to check before buying covers the steps that come before this one.

Frequently Asked Questions

What is the first thing to do after buying a Valorant account?

Take over the included email inbox, then change the Riot account email to one you own. The registered email controls password resets, so it's the single most important control. Then change the password, turn on MFA and sign out all other sessions.

Does Riot support authenticator apps?

Yes. Riot's multi-factor authentication can use the Riot Mobile app, authenticator apps such as Google Authenticator or Microsoft Authenticator, or codes sent to your email. The app-based options are the safer choice.

Can the seller still recover the account after I secure it?

If you've taken over the inbox, changed the account email and password, turned on MFA, removed their sign-in methods and signed out all sessions, the practical recovery routes are closed. Keep your proof of purchase in case of a dispute.

How long does securing the account take?

One focused sitting, if you have the original email access. Do it as soon as you receive the credentials: the longer the seller's email, password and sessions stay active, the bigger your exposure. Our general checklist of what to do after buying a game account covers the same routine for other games.

Buying with security built in makes all of this simpler. Every Valorant account on BuyAccount comes with full email access and 14-day buyer protection. For the bigger picture, read our guide on whether it's safe to buy a Valorant account.