Inspired by epicgames-weekly-freegames, this project takes a different approach to redeeming free games. Automating game redemption using Selenium had some unavoidable downsides:

1. Fails on any UI updates to the store
2. Unable to resolve any Captcha requests

I decided to take a different approach by only using the APIs that the Epic Games Store site uses itself. This resolves the above issues by:

1. Using APIs that are more stable than web design
2. Manually injecting a FunCaptcha session token into the login flow

• Login
  • Captcha
    • Emails you when a link to solve a Captcha when required
  • 2FA handing via TOTP token
  • Session ID
• Game catalog discovery
  • Get list of available free games
  • Filter out games that are already owned
• Purchase available free games
  • Order preview
  • Order confirmation
• Cookie management
  • Save to file in case of shutdown
  • Import cookies from browser
• Schedule check/purchase via cron string
• Authentication refresh to reduce login count
• Support for multiple accounts
• TODO: Proper global store support (Works fine for now)
• TODO: Redeem all free games, not just the weekly promotion

Recent events have removed the ability to easily automate Captcha solving with Google Speech-to-text. This is a workaround that makes you solve a captcha by emailing you a link where you can solve it. To use this requires:

• The ability to expose ports on your machine/local network/internet
  • Where you expose the port limits where you can solve captchas from (the machine running the container/your home network/anywhere, respectively)
• Access to an SMTP server for email (Gmail works)

1. Expose port 3000 in your Docker run config (e.g. -p 81:3000 maps the machine's port 81 to the container's port 3000)
2. If you want to access the Captcha solving page from outside your network, setup any port forwarding/reverse proxy/DNS
   • Hosting over HTTPS may result in better captcha solving success
3. Set the baseUrl in the config
4. Set the SMTP settings in the email config
   • Example Gmail settings
   • If you have 2FA setup for your Google account, you'll need to create an app password

If you want to test the email and webserver, delete an account's <email>-cookies.json from your config directory, as this usually forces a fresh login with a captcha. Then just restart the container.

The tool can be configured with a combination of JSON and environment variables. The config file supports JSON5 syntax (comments, trailing commas, etc). For each property, the JSON config value takes priority over the respective environment variable value. For details on each property, see the table below.

The config file is store in the mounted ./config directory.

{
    "accounts": [
        // Multiple accounts can be configured here
        {
            "email": "[email protected]",
            "password": "abc123",
            "totp": "EMNCF83ULU39CYFOPAQW8VHZBC7S7CTWKDXM19C2S2JYI69R39NE"
        },
        {
            "email": "[email protected]",
            "password": "abc123",
        },
    ],
    "onlyWeekly": false,
    "runOnStartup": true,
    "intervalTime": 60,
    "cronSchedule": "0 12 * * *",
    "runOnce": false,
    "logLevel": "info",
    "baseUrl": "https://example.com",
    "email": {
        "smtpHost": "smtp.gmail.com",
        "smtpPort": 587,
        "emailSenderAddress": "[email protected]",
        "emailSenderName": "Epic Games Captchas",
        "emailRecipientAddress": "[email protected]",
        "secure": false,
        "auth": {
            "user": "[email protected]",
            "pass": "abc123",
        },
    }
}

If you are using full JSON configuration, the only remaining Docker configurables are TZ and the volume.

Epic has begun enforcing two-factor when claiming free games. It is likely necessary when using this tool.

If you have two-factor authentication (2FA) enabled on your account, you need to add your TOTP secret as an environment variable. To get your TOTP secret, you may need to redo your 2FA setup:

1. Go here to enable 2FA.
2. Click "enable authenticator app."
3. In the section labeled "manual entry key," copy the key.
4. Use your authenticator app to add scan the QR code.
5. Activate 2FA by completing the form and clicking activate.
6. Once 2FA is enabled, use the key you copied as the value for the TOTP parameter.

$ docker run -d -e TZ=America/Chicago -v /my/host/dir/:/usr/app/config:rw -p 3000:3000 charlocharlie/epicgames-freegames:latest

$ docker run -d -e TZ=America/Chicago -e [email protected] -e PASSWORD=abc123 -e TOTP=ABC123 -e RUN_ON_STARTUP=true -e BASE_URL=https://example.com -e SMTP_HOST=smtp.gmail.com -e SMTP_PORT=587 -e SMTP_HOST=smtp.gmail.com -e [email protected] -e EMAIL_SENDER_NAME="Epic Games Captchas" -e [email protected] -e SMTP_SECURE=true -e [email protected] -e SMTP_PASSWORD=abc123 -v /my/host/dir/:/usr/app/config:rw -p 3000:3000 charlocharlie/epicgames-freegames:latest

If you're experiencing issues logging with with username and password, you can import cookies for a temporary session.

1. Setup the container per the below instructions
2. In your web browser, log in to the Epic Games Store with "Remember me" checked.
3. Install the Cookie Editor or EditThisCookie browser extension.
4. While viewing the Epic Games Store page, copy your cookies to clipboard by clicking the "Export" button on the extension:
5. In your mounted ./config folder, create <email_address>-cookies.json (e.g. [email protected]), and paste in your cookies.
6. Start the epicgames-freegames-node container and the cookies will automatically be converted to a new format.

Notes:

• Due to device ID issues, you will only stay logged in for 8 hours.
• If you log out of the browser session you copied the cookies from, the container will break.
• If you have the container scheduled regularly, it should automatically refresh the cookies and keep you logged in for some time.
• If you get an email prompting you to solve a captcha to log in, you should repeat the above process.
• Epic Games still uses Arkose for purchase captchas, so you still may recieve emails when games are redeemed.
• Your password is optional when using this, so you can fill it with some junk if you prefer. It just can't be "".

Place these variables in a .env file in the project root.

These variables are not currently necessary due to the plus-sign email exploit.