Steam two step authentication works!

MissChief · 25 Jul 2016 at 11:57

Just received an email advising me someone in the U.S. Just tried to access my Steam account with the correct username and password. Even that itself is mildly concerning but thanks to steam's two step authentication I've just reset my password so whoever this joker is, he (or she) can jog on!

If you don't have it, set it up. I don't have any steam funds in my steam wallet but I do have around fifty games. Not sure what they could have done other than, perhaps, cheat in some games and get me banned though?

FloppyPoppy · 25 Jul 2016 at 12:42

Even if they have both your password and user name they can't get on because of steam guard and that is mandatory with steam IIRC

iv-tecman · 25 Jul 2016 at 12:48

Yes steam guard is pretty much mandatory but if you want to trade on the market then you also need steam mobile authentication as well.

I have mobile authentication on, but do wonder what would happen if I had my phone stolen or lost, as without it I can't log into Steam on another machine...

FloppyPoppy · 25 Jul 2016 at 12:51

iv-tecman said:
Yes steam guard is pretty much mandatory but if you want to trade on the market then you also need steam mobile authentication as well.

I have mobile authentication on, but do wonder what would happen if I had my phone stolen or lost, as without it I can't log into Steam on another machine...

^ this I removed my phone as you have pointed out if you lose your phone you are completely messed up. I don't fancy losing 700+ games. I hate the whole phone for trading thing too as I want to sell my trading cards but just to much effort now.

iv-tecman · 25 Jul 2016 at 12:57

harry5522 said:
^ this I removed my phone as you have pointed out if you lose your phone you are completely messed up. I don't fancy losing 700+ games. I hate the whole phone for trading thing too as I want to sell my trading cards but just to much effort now.

that is a bit worrying. So no way to recover if the phone is stolen? I only have it on so as I can trade trading cards or sell or buy on the market.

docsonic · 25 Jul 2016 at 12:59

iv-tecman said:
Yes steam guard is pretty much mandatory but if you want to trade on the market then you also need steam mobile authentication as well.

I have mobile authentication on, but do wonder what would happen if I had my phone stolen or lost, as without it I can't log into Steam on another machine...

They give you a recovery code when you first set it up in case theft or loss etc.

Kosmiche · 25 Jul 2016 at 13:17

iv-tecman · 25 Jul 2016 at 15:35

docsonic said:
They give you a recovery code when you first set it up in case theft or loss etc.

That's right, they did, I've just wrote it down and stored it. Thank you for reminding me.

meandu229 · 25 Jul 2016 at 15:37

iv-tecman said:
That's right, they did, I've just wrote it down and stored it. Thank you for reminding me.

Yeah make sure you keep recovery code, I keep mine in my lastpass vault.

ic1male · 25 Jul 2016 at 21:22

And if you didn't make a note of your recovery code initially, you can go back in to Steam and request a new one right now.

Hang on, I better check.

Yes, there is an option in settings "Get Backup Codes"

JulioH · 26 Jul 2016 at 00:35

Is the backup code a 6 digit number?

ic1male · 26 Jul 2016 at 01:43

JulioH said:
Is the backup code a 6 digit number?

Mine are 7-digit alphanumeric codes.

iv-tecman · 26 Jul 2016 at 11:15

JulioH said:
Is the backup code a 6 digit number?

Mine is a mix of letters and numbers, not sure if its different for everyone.

I've since wrote it down and stored it in a safe place.. Just in case.

snowdog · 26 Jul 2016 at 13:33

I can't stand the fact they try to push the Steam phone app for authentication.

I hate mobile phones, small pieces of crap, great outside, but when I'm sitting at my PC I have no intention of grabbing a tiny phone as opposed to my triple screen PC setup.

Very annoying they discourage email for 2 step auth and want to use the mobile authenticator. I've gone as far as installing teamviewer on my phone and doing phone crap from pc.

Antony101 · 26 Jul 2016 at 13:39

I've been receiving these emails for months. Still haven't got around to changing my password yet.

a66as · 26 Jul 2016 at 17:36

If you lost your phone, then you would have to most likely contact customer services and they might ask for identification to be scanned and sent to them. i doubt they would or can keep you out of your steam accounts you spend money on.

snowdog · 26 Jul 2016 at 17:44

If you lose your phone then surely you just get a new sim with the same number and re-authenticate through phone number?

ic1male · 26 Jul 2016 at 17:53

snowdog said:
If you lose your phone then surely you just get a new sim with the same number and re-authenticate through phone number?

They don't work on phone number when you use Steamguard / Google Authenticator. Some of the sites do use a phone for backup but not all.

snowdog · 26 Jul 2016 at 20:02

Steamguard is authenticated by SMS?

I know it is, because I had broken my phones ability to receive SMS, and couldn't re-authenticate my phone without it.