Epic's Linux Anti-Cheat: What EAC v2 Needs to Run Fortnite

Epic Games is rebuilding Easy Anti-Cheat for Linux so Fortnite can finally run there. The new version, EAC Linux v2, skips a kernel driver and instead demands a locked-down boot: Secure Boot, TPM 2.0, a kernel signed with a well-known key, kernel lockdown and IOMMU. Most mainstream distros can meet it; Steam Deck currently cannot.
What Happened
On October 14, 2026, Epic made two announcements on the same day. The first was a preview of a rebuilt Epic Games Launcher that, for the first time, runs natively on Linux as well as Windows and macOS. The second, published on Epic Online Services under the title "Awesome Gaming on Linux Without Cheating", described EAC Linux v2, a ground-up rework of the company's Linux anti-cheat.
The two are linked. In its store blog post, quoted by The Verge, Epic said that to bring Fortnite to Linux it is "rebuilding Easy Anti-Cheat (EAC) and working with distro maintainers on security requirements," and that once the system works with "a critical mass of distro maintainers," Fortnite will arrive through the new launcher. Epic will pilot EAC Linux v2 in Fortnite first, then offer it to other developers. Engineering director Rick Deist told The Verge there is no timeline yet.
According to the launcher preview page, the new app cold-starts in 5.47 seconds against 10.07 seconds for Steam, and moves from the background to the library in 0.36 seconds against Steam's 0.42. Epic says the figures are an average of five tests on each of 13 machines, excluding the three lowest-end ones, run in October 2026 by Keywords Studios, which Epic commissioned. The Linux build supports Ubuntu 22.04 LTS or newer, Fedora 43 or newer and Debian 12 or newer on 64-bit x86 hardware with 4 GB of RAM and 2 GB of storage.
Epic's blog post opened with a line that drew most of the coverage: the company said it had "vibe coded" the new launcher. Engadget and Polygon criticised the framing. Tom's Hardware reported that Epic first told competitive Fortnite and Rocket League players and Unreal developers to stay on the old launcher, then removed that advice the same afternoon, saying nothing in the preview prevents casual or competitive play.
Why It Matters
Fortnite is one of the biggest games on the planet and it has never had a Linux version. That gap has been one of the clearest reasons PC players give for keeping Windows around. Back in February 2022, Epic CEO Tim Sweeney explained the holdout plainly, saying Epic did not have confidence it could combat cheating "at scale under a wide array of kernel configurations."
EAC Linux v2 is Epic's answer to that problem, and it matters beyond one game. EAC protects a long list of multiplayer titles, and many of them never enabled Linux or Proton support because, in Epic's own words, its Linux implementation "couldn't offer the same level of protection" as the Windows one. If v2 holds up in Fortnite, Epic says it will make it available to other studios, which could unlock competitive games that are currently Windows-only for Linux players.
It also sets a precedent for how anti-cheat works on an open operating system. Instead of shipping its own kernel code, Epic is asking Linux distributions to adopt a common security baseline.
How It Works
On Windows, EAC leans on a kernel driver that starts when a protected game launches and stops when it exits. EAC Linux v2 deliberately does not do that. Epic says it will not install or load any anti-cheat kernel module. It relies on security features already built into Linux, plus a systemd service and Epic's own eBPF programs. The first time you launch a protected game, you are prompted to install that service, and it runs only while the game is running.
The idea is simple: if the anti-cheat can prove that the machine booted a trusted, unmodified kernel that cannot be tampered with afterwards, it does not need to police the kernel itself. Epic lists eight requirements to establish that proof:
- Signed kernel and kernel modules. The kernel running during play must be signed with a "well-known" key, and so must any loadable modules, including out-of-tree ones such as Nvidia's GPU drivers. A custom kernel could otherwise lie to the anti-cheat.
- TPM 2.0. The Trusted Platform Module keeps extend-only registers that record each stage of boot, creating a tamper-resistant log the anti-cheat can verify later without running at boot itself.
- Secure Boot. Firmware only runs a boot manager signed by a trusted key, and that boot manager checks the kernel's signature. This blocks cheats that load during the boot chain.
- Measured boot. The boot manager must actually write those measurements to the TPM. systemd-boot and GRUB typically do this by default.
- IOMMU. On non-handheld devices, the IOMMU must be on with passthrough disabled, which stops DMA hardware cheat cards from reading game memory.
- Kernel lockdown in integrity mode. The kernel lockdown feature stops even root from loading unsigned modules, writing to physical memory or touching CPU model-specific registers.
- kexec disabled. kexec can swap in a new kernel without a full reboot, which would make the TPM's boot log describe a kernel that is no longer running.
- BPF LSM active. The BPF Linux Security Module lets eBPF programs hook security checks, so EAC can block other processes from reading or writing the game's memory without its own kernel module.
The "well-known" key list is the political centre of the plan. Epic's current list includes the Secure Boot authorities used by Ubuntu, Fedora, Debian, openSUSE and SUSE Linux Enterprise, Rocky Linux and AlmaLinux, Universal Blue (the base for Bazzite, Bluefin and Aurora), and the Microsoft UEFI CA that signs the shim bootloader. Derivatives such as Linux Mint and Fedora Silverblue inherit their parent's key. Epic says it will maintain the list at first and aims to open-source it and accept community pull requests.
Players are not forced to live inside that configuration. EAC checks the requirements only when a protected online game starts, so you can keep a separate boot entry with the required kernel and command line and pick it only when you want to play. You can also enroll your own Secure Boot keys for other boot paths, though Epic notes that if you boot through shim, custom keys belong in the Secure Boot database rather than as Machine Owner Keys, because every enrolled MOK is trusted for module signing and must therefore be well-known. Starting a protected game on a machine that fails the checks shows an error rather than triggering a ban.
Epic is clear that this is a foundation, not a finished wall. It also uses server-side data to catch cheaters, and says any anti-cheat needs constant updates. The stated goal is to raise the cost of building and maintaining cheats so that a typical player rarely meets one.
What's Still Unknown
The biggest open question is timing. Epic has given no date for Fortnite on Linux, and its trigger, "a critical mass of distro maintainers," is not defined. Epic says it is contacting Linux community leaders and will co-host a panel later this year with Fedora Project Leader Jef Spaleta.
Handhelds are the second gap. Epic says the Steam Deck "does not support the required features" for EAC v2, though it is talking with Valve. Deist told The Verge that Epic is investigating SteamOS compatibility, while store chief Martin Keely said Fortnite is not coming to the Steam store.
Third, it is unclear how many existing setups pass without changes. Rolling-release and hobbyist distros that are not on the key list, self-compiled kernels, and GPU drivers built locally through DKMS and signed with a personal key all look likely to fail the signed-module rule unless a distro ships pre-signed builds. Epic also says these security features "may require configuration changes to activate," and it expects the requirements to change over time.
Finally, the new launcher itself is a preview. Epic's FAQ says some social and account features are missing, installing it automatically removes the legacy launcher, and the macOS build supports Apple Silicon only. How much of its code was written with AI, and how that affects maintenance and security, is something Epic has not detailed.
Frequently Asked Questions
Can I play Fortnite on Linux right now?
No. Epic's new launcher runs natively on Linux in preview, but Fortnite is not available there yet. Epic says it will release Fortnite for Linux through the launcher once EAC Linux v2 works with enough distributions, and it has not given a date. Running the Windows build through Proton or Wine is still blocked by Fortnite's anti-cheat settings.
Does EAC Linux v2 install a kernel driver?
No. Epic says EAC Linux v2 does not install or load any anti-cheat kernel module. It uses features already in the Linux kernel, including Secure Boot, measured boot, kernel lockdown, IOMMU and the BPF security module, along with a systemd service and eBPF programs. That is a deliberate contrast with the Windows version, which relies on a kernel driver.
Does the anti-cheat run all the time in the background?
No. You are asked to install an anti-cheat systemd service the first time you launch a protected game. Epic says that service starts only when a protected game starts and stops when the game exits. The system requirements are also checked only at game launch, so the rest of your session is not monitored by EAC.
Which Linux distributions will work with EAC Linux v2?
Epic's initial well-known key list covers Ubuntu and derivatives such as Linux Mint, Fedora and Silverblue, Debian, openSUSE, SUSE Linux Enterprise, Rocky Linux, AlmaLinux, and Universal Blue distros such as Bazzite, Bluefin and Aurora. Your machine still needs TPM 2.0, Secure Boot, IOMMU and the right kernel options enabled, which may require configuration changes.
Will Fortnite work on the Steam Deck?
Not under the current plan. Epic says the Steam Deck does not support the features EAC Linux v2 requires, but it is talking with Valve and hopes to support it later. Epic also told The Verge it is investigating SteamOS compatibility, while saying Fortnite will not be sold or distributed through the Steam store itself.
Could I get banned if my PC does not meet the requirements?
No. Epic's FAQ says that if you start a protected game without meeting the requirements, you will simply see an error message, not a ban. You can keep a separate boot entry configured for anti-cheat play and select it only when you want to play a protected game, leaving your everyday setup untouched.
Is the new Epic Games Launcher faster than Steam?
Epic says so. Its commissioned tests by Keywords Studios measured a 5.47-second cold start against 10.07 seconds for Steam, and 0.36 versus 0.42 seconds going from the background to the library. Those are averages across 13 Windows machines, excluding the three slowest, so results on your own hardware may differ.
Should I install the launcher preview now?
Only if you are comfortable with beta software. Installing the preview automatically uninstalls the legacy launcher, and Epic says some social and account management features are missing. Your purchases, installed games, cloud saves and progress carry over, and Epic says games, including competitive titles, play normally once launched.
Related Reading
Anti-cheat has a long history of reaching deep into PCs. Our earlier piece on EA's kernel-level anti-cheat for PC games shows the Windows-driver approach Epic is avoiding on Linux, and our look at Valorant, game hacking and the cheat market explains why publishers treat cheating as a business threat. If you are weighing a handheld for PC games, our buyer's guide to handheld gaming PCs covers the Steam Deck and its Windows rivals. For the distro side, see what is new in Ubuntu 26.04 LTS, and for the store rivalry behind the launcher, read how online game marketplaces work.