How to add two-factor authentication to steam

How to add two-factor authentication to steam

With Steam being such a pop gaming platform, there are millions of people using it every day. Only like for any other respectable online service, it'due south possible to add two-cistron authentication to Steam for an additional layer of security.

Two-factor authentication works in a simple manner – you don't simply need to enter your password, you lot will also be sent a lawmaking on your telephone that also has to be used during the login process. This way, if someone were to get a concur of your password they still wouldn't be able to log into your business relationship.

How to add two-factor authentication to Steam

How to add two-factor authentication to steam

To start, open Steam in your web browser and log into your account. Click your profile name in the upper-right corner then select "Account details".

In the "Account Security" department, select "Manage Steam Guard account security".

How to add two-factor authentication to steam

You can besides exercise this from your Steam desktop app. Just launch it, select the "Steam option from the upper-left menu and click "Manage Steam Guard account security".

Regardless if you lot're on the Steam website or desktop app you take two options: you can opt to receive the codes via e-mail or have them sent to your smartphone via the Steam app.

Get Steam codes via email

How to add two-factor authentication to steam

If you want to receive your code via electronic mail, click the "Get Steam Guard Codes by electronic mail" selection. Once y'all receive the email, open up it and copy the code it contains.

How to add two-factor authentication to steam

Enter information technology in the defended field on the login screen and so click "Submit".

Get Steam codes via the Steam app on your smartphone

To apply this option yous will need to take the Steam app installed on your smartphone. If you don't have it already, visit one of the links below to get the app on your iPhone or Android device:

Launch the Steam app on your phone and login using your regular username and countersign. If yous've previously set up the Steam Guard codes to exist sent via email you will need to use the access code you'll receive in social club to log in.

How to add two-factor authentication to steam

Open the side menu and tap "Steam Guard" so select "Add authenticator". To continue, enter the phone number you lot're using on this smartphone and tap "Add phone".

How to add two-factor authentication to steam

An SMS volition exist sent to your phone immediately. Open information technology and enter the code in the Steam app then tap "Submit".

How to add two-factor authentication to steam

On the post-obit screen, you will receive a recovery lawmaking. This has aught to practice with the ii-cistron authentication codes. This code can be used to recover your Steam business relationship in case y'all e'er lose your phone. Follow the on-screen recommendation and shop it in a condom identify. After you do this, hit the Washed button.

With two-factor authentication enabled, when you want to log into Steam yous will need to launch the Steam app on your smartphone and select "Steam Baby-sit" from the side menu. Keep in mind the generated lawmaking is valid for a limited fourth dimension so if you don't use it before the timer resets you volition need to enter the next generated code.

How to add two-factor authentication to steam

If you've been playing PC games in the terminal few years, the accumulated games in your Steam account are probably worth hundreds (or maybe even thousands) of dollars. Mayhap fifty-fifty more importantly, your Steam account might incorporate in-game items that tin be traded for real-world cash…and thus, stolen with some very real consequences. And then it'south a very good thought to apply Valve's Steam Guard two-factor hallmark to your account.

Two-cistron authentication, for those who don't know, is an extremely important security characteristic you should enable on all of your accounts. Information technology forces you to log in with non simply a password (something you know), but a code from your phone (something you have). That way, if someone gets a concur of your countersign, they even so won't be able to become into your account.

How to add two-factor authentication to steam

To enable it in Steam, open your browser and log in to your Steam account. Click your business relationship proper name in the upper right-hand corner, and so click "account details." Under the "Account Security" portion of the page, click "Manage Steam Baby-sit account security."

How to add two-factor authentication to steam

Alternatively, you can open the Steam desktop awarding, click the "Steam" bill of fare item in the upper left-hand corner, then "Manage Steam Guard account security."

Option 1: Receive Your Code via Email

From this screen you tin can choose email codes or codes sent to the official Steam App on your smartphone. Click "Go Steam Baby-sit Codes by electronic mail" if you don't want to use your phone: y'all'll be sent an e-mail that looks similar this i whenever y'all log in to Steam either on the web or via the desktop app.

How to add two-factor authentication to steam

Copy the code from your email and put it into the field that appears on the login screen:

How to add two-factor authentication to steam

Click "submit" and you're ready to go.

Option Two: Receive Your Lawmaking via the Steam Smartphone App

For the mobile version of Steam Baby-sit, download the app on your phone: hither are the links for the Android version and the iPhone app.

How to add two-factor authentication to steam

On your phone, log in with your standard Steam business relationship and countersign. If you already take Steam Guard ready up via email, you'll demand to cheque your inbox for another access code before continuing.

How to add two-factor authentication to steam

Tap the side menu button, then "Steam Baby-sit," the first detail below your Steam username. Tap "add authenticator," so enter the phone number of the device you're currently using. Tap "add phone."

How to add two-factor authentication to steam

You should receive a text message correct away. Enter the lawmaking within in the next screen, and tap "Submit."

How to add two-factor authentication to steam

On the adjacent screen you're given a recovery code. This is separate from the codes you'll receive whenever you lot log in to Steam on your computer: it'due south a permanent means of recovering your business relationship if y'all should lose your phone. Take the app's advice and put the code somewhere secure. Printing "Done" when you're set up.

How to add two-factor authentication to steam

Now when you log in to your Steam account on any device, you'll need to open the Steam app on your telephone and tap "Steam Guard" in the menu. Note that the code cycles continuously: if you don't enter it in fourth dimension on your calculator or other device, you lot'll need to utilise the adjacent code that appears as the timer resets.

How to add two-factor authentication to steam

Steam – Turn on 2FA – How to Add together Ii-Factor Authentication for Steam Web or Mobile App

Notation: Nosotros are reader supported and may earn a small commission when y'all click on links in posts

Steam Baby-sit is Steam's proprietary two-factor authentication (2FA) protocol used to protect accounts from hackers. Steam Guard is used to protect accounts from hackers or unauthorized access by requiring users to enter a security code each fourth dimension they log in.

Steam Baby-sit 2FA works differently on the website than on the mobile app. With Steam Guard enabled, users must log in from an authenticated mobile device. Alternatively, when logging in from a laptop or desktop estimator, users must enter a code sent to the electronic mail accost associated with the account.

How to Use 2-gene Authentication for Steam – Web Desktop or Laptop

Steam sets a cookie for website logins from laptop and desktop computers. To use two-factor authentication, users will accept to verify their email address used for the account and enable 2FA in account settings. With two-cistron authentication enabled, each fourth dimension a user attempts to login into Steam, they will be sent an email with a code that must be entered each time they log in.
With Steam Baby-sit enabled, Steam saves a cookie to remember your calculator or browser.

Where is the Steam Guard Carte? Web Steam

Steam Baby-sit for a laptop or desktop reckoner is turned on in Steam business relationship settings.

  1. Log into your Steam web client
  2. Click on Steam in the upper left corner
  3. Go to Settings
  4. Nether the Account tab, select Manage Steam Guard Account Security
  5. Click on Manage Steam Baby-sit
  6. Select Get Steam Guard codes by email (will require you to re-login)

How to add two-factor authentication to steam

Each fourth dimension you effort to log into your Steam account when Steam Guard is enabled, a text code will be sent to the electronic mail address attached to the Steam account.
Your browser must have cookies enabled for Steam Baby-sit to work properly.

Why is Steam Guard is Not Working?

If Steam Guard spider web client is notwithstanding not working then you may have your spider web browser security is ready to high, private browsing enabled, or your spider web browser may be clearing cookies when you exit.

How to Add Two-Factor Hallmark to Steam – Mobile App

The email accost associated with your Steam account can be used for web customer 2FA and for business relationship recovery, just it does not enable 2-gene hallmark for mobile devices.

To use Steam Guard on a mobile device users need to download the Steam app. After that, they must authenticate their phone with their team account. Users receive a unique Steam Guard code that must be used each fourth dimension they log in from the mobile app. The code changes occasionally.

Where is the Steam Baby-sit Menu? Steam Mobile App

  1. Download the Steam app from the official Google Play store or the are the Apple store. Never download whatever app from third-party websites
  2. Open the Steam app and login
  3. Select Steam Guard from the menu
  4. Choose Add together Authenticator and follow the instructions
  5. Enter your telephone number in the pop-up screen
  6. Steam baby-sit mobile authenticator is at present enabled

A confirmation code will be sent and must be entered into the app to authenticate the phone. Inbound a phone number into the Steam app authenticates the device. When a mobile device is authenticated with Steam Baby-sit, users are sent a permanent recovery code that they should keep in case they need to recover their Steam business relationship.

What is ii-factor Authentication

Ii-factor Authentication is a way to secure an online account by requiring a second step each time you log in. A common grade of two-cistron hallmark is requiring the user to enter a code sent to an email address associated with an account. To login, the user enters a username and password. After the text code is sent to their e-mail, it must be entered on the screen to complete the login process. Some other common form of 2FA is sending the login code via SMS text to a pre-authorized mobile device.

Google Authenticator cannot exist used equally an culling authenticator app for Steam

What is Steam?

Steam is a video game digital distribution platform developed past Valve Corporation. Information technology was launched in September 2003 equally a way for Valve to provide automatic updates for their games. It somewhen expanded to include games from third-political party publishers. The platform has over 30,000 games. Steam games include PUBG, Rainbow Six Siege, Grand Theft Auto, and Warframe. In that location is no monthly subscription with steam

2-factor hallmark ensures that only users with trusted devices can log on. To provide two-gene authentication, you configure the OTP service. Then, stop-users browse tokens and obtain passcodes using Sophos Authenticator.

Objectives

Specify OTP service settings

Kickoff, you turn on the OTP service. Then, to maximize the protection this type of authentication offers, you crave all users to use it. You lot too specify the features for which two-factor authentication is required.

The post-obit steps are executed on the firewall.

Option Description
One-fourth dimension countersign On
OTP for all users On
Auto-create OTP tokens for users On

Obtain a token and passcodes

End-users scan the OTP token through the user portal using Sophos Authenticator. The authenticator then provides passcodes.

The following steps are executed by an terminate-user.

  1. Download Sophos Authenticator for Android or Sophos Authenticator for iOS on a mobile device.
  2. Log on through the user portal.

The Steam platform is designed to encourage users to use 2-factor authentication. One of the community tasks (achievement-similar objectives) on Steam is "Use the Steam Mobile App for two-factor hallmark". This is visible on public profiles for anyone.

This could let possible hackers chop-chop find out whether an account uses two-factor authentication, letting them cull targets more efficiently.

Should people be concerned about this security risk? Should it be reported to Valve? Or is it harmless?

Doesn't this feature completely undermine the purpose of 2FA every bit hackers would simply avoid accounts with it and choose other accounts that are valuable targets without 2FA?

How to add two-factor authentication to steam

3 Answers 3

I recall this works a bit like a home alarm system sign. Simply the sign itself in your front lawn will deter burglars from even trying to become into your dwelling because of how much more difficult it looks like information technology volition exist.

In a similar sense, having this accomplishment acts like the sign: if an attacker saw this they might not even try to go into this account because information technology's increased perceived difficulty.

Does this increment the likelihood of another account being targeted?

  • I'd say yeah since the pool of potential targets only became smaller, any private in that pool has an increased run a risk to be a target

What can those without the achievement practise to reduce their take chances of being attacked?

  • Put up a abode security sign (Enable two factor hallmark!)

Summary: Information technology doesn't undermine two gene authentication but, hopefully, encourages others to follow all-time practices in securing their accounts.

How to add two-factor authentication to steam

It does not undermine the purpose of 2FA, but information technology might affect the security of users not using 2FA.

The goal of 2FA is to alter login to require, well two factors. Specifically, something you know and something yous have. Publishing a listing of users that use 2FA does not reduce the security of 2FA. An attacker still must obtain the password and the device.

On the other hand, at that place may be attack strategies that just work for accounts that exercise not use 2FA. For example, if a password lexicon set on is possible, attackers may employ the published list to identify accounts that don't use 2FA and hence are vulnerable to the countersign set on.

I think information technology is important to distinguish between three different questions one might inquire:

Does this undermine the security of a particular user who uses 2FA? Answer: No. If you're using two-factor authentication, making that public doesn't help the assailant break into your account. If annihilation, information technology helps you lot, by deterring some attackers from attacking you.

Does this undermine the security of a item user who doesn't utilise 2FA? Answer: Yes, somewhat, because it could brand it easier for attackers to mountain targeted attacks on users who don't use 2FA.

That said, information technology's important to keep this in perspective. It'southward not harmless, but it's not devastating either. I don't call up it'south going to exist a game-changer. Suppose 50% of users utilize 2FA. Then an attacker who tries attacking a bunch of accounts in succession volition but be able to reduce the number of accounts they need to try past at nigh a gene of 2, using the information leak pointed out in your question. That said, I suspect many attackers probably won't even bother to check the public profile and for those attackers this information leak will accept no issue.

Does this undermine the security of the ecosystem as a whole? Respond: Yeah, somewhat. Of class, this is primarily relevant to Valve, rather than to its users. They have incentive to protect their own bottom line.

As a user, if y'all are concerned, one possible response is to enable 2FA on your Steam business relationship.

Should y'all contact Valve to disclose this data leak? Sure — why non?

Two-cistron authentication adds additional security to your Reddit account by requiring a second step to sign in. It requires you to requite a half-dozen-digit verification code generated from your phone in addition to your username and password login.

When two-cistron authentication is enabled, yous will need your password and a verification code from your telephone whenever you lot sign in on Reddit or with a Reddit login. Even if someone else obtained your Reddit username and password, they still could non log in as you lot.

How do I enable ii-factor authentication?

  • Log in to your Reddit business relationship
  • Click on preferences in the top menu and then click countersign/email
  • Under 'two-gene authentication', select enable
  • Follow the steps to consummate the process
    • Verify your email accost
    • Enter your password
    • Set upward your authenticator app (see 'Get the code through an authenticator app' below for more information)
    • Generate and save your backup codes

Get the lawmaking through an authenticator app

Several mobile apps are bachelor which allow you to generate verification codes for two-factor authentication. Typically, any app supporting Time-based One-Fourth dimension Password (TOTP) protocol will piece of work. Hither are a few nosotros propose:

  • Google Authenticator (Android or iPhone)
  • Authy (Android or iPhone)

To use one of these apps:

  • While enabling, you'll come across a prompt with a QR code you volition utilize to annals your Reddit account with your authenticator app. Open your authenticator and follow the instructions given to you (yous'll usually select to "add together a new account" or similar) and scan the QR code when prompted by the app.
  • If your authenticator app is not scanning the QR lawmaking properly or failing for some other reason, you lot can enter the security cardinal manually. Select enter the cardinal manually and enter this into your authenticator app.
  • In one case your app is configured, enter the security code generated past your authenticator app to complete the two-factor hallmark procedure.
  • You will receive an e-mail and personal message (PM) confirming your enrollment.

Generate fill-in codes

If you lose your mobile device or cannot use your authenticator app, yous can utilize fill-in codes provided by Reddit to admission your account. Ten backup codes are generated. Each code tin be used only ane time.

We recommend yous print off and store your codes in a prophylactic location.

To generate backup codes:

  • Log in to your Reddit account
  • Click on preferences in the acme menu so click password/email
  • Under 'two-factor hallmark', select generate for 'backup codes'
  • Follow the steps to complete the procedure
    • Enter your password
    • Access and write down your backup codes

To log in with your backup codes, run into more under 'How do I log in with two-factor authentication?'

How practice I log in with two-factor authentication?

With your authenticator app

To log in on either desktop and iOS / Android:

  • Sign into Reddit
  • Enter your username and countersign
  • Open your authenticator app on your mobile phone. Select the Reddit business relationship y'all configured
  • Enter the half-dozen-digit code provided in your app
  • Select check code

How to add two-factor authentication to steam

How to add two-factor authentication to steam

With backup codes

To log in with your backup codes on either desktop and iOS / Android:

  • Locate your fill-in codes
  • Sign into Reddit
  • Enter your username and password
  • When asked for your verification lawmaking, select Or utilise a backup code
  • Enter the 6-digit backup code and select bank check code

What do I practise If I lost my phone or tin can't log in with 2-factor hallmark?

Use backup code

If you've lost your mobile device, you lot can employ backup codes to log in to your Reddit account. See more under 'Generate backup codes'.

Sign in from a trusted estimator

You may exist signed into Reddit on a trusted desktop figurer even though you lot take lost your mobile device. If you are, you tin disable two-factor authentication until you lot can again get verification codes. Meet more nether 'How do I disable two-factor authentication?'

How do I disable two-factor authentication?

To disable 2-cistron authentication on your Reddit business relationship:

  • Log in to your Reddit account
  • Click on preferences in the top menu and then click password/email
  • Under 'two-gene hallmark', select disable
  • Enter your countersign and select disable two-factor

Will my third-political party applications piece of work with ii-factor authentication?

Yep. Applications using OAuth volition be supported. When signing in with your Reddit credentials, you will exist asked to enter your 6-digit verification code.

However, some applications may not be using the OAuth protocol. If you take 2-gene hallmark enabled, and you are unable to sign in to a third-party application, you can use the following method:

While using the third-party application:

  • In the username field, enter your Reddit username every bit you lot normally would
  • In the password field, enter your password and your verification lawmaking in the following format: "

: ". Don't forget the colon in the eye!

Doing so should permit you admission to the app.

What if I switch or get a new phone?

If you go a new mobile device, y'all'll need to prepare 2-factor hallmark with your new telephone:

  • Disable ii-factor authentication. Encounter 'How do I disable two-factor authentication?'
  • Re-enable ii-factor hallmark on your new phone. See 'How Practise I enable Two-Gene Authentication'

Internet security is a big deal, and information technology is something that the vast bulk of social media companies and platforms out there place a lot of accent on. Later all, almost users are not going to be interested in a site that isn't secure, and frequent security breaches tin atomic number 82 to users existence concerned their privacy, worrying that they might not be able to get the same level of rubber that they desire.

TikTok, arguably the fastest growing social media platform in the world, has lagged behind in this area. In spite of the fact that a lot of users take been request the platform fourth dimension and time again to improve its security, the social media platform has for some reason profoundly delayed the rollout of two footstep security measures that have become commonplace in most other social media platforms that have managed to reach a lot of success in the market place based on the services they provide.

It seems like TikTok is finally wising up based on a number of users noting that two factor hallmark (2FA) has at present been widely rolled out. Yous will go the option to receive a code on your phone through SMS before yous tin log in, making information technology so that fifty-fifty if someone has your password they would still need access to your telephone in order to be able to get the security code you will receive.

One reason why it took TikTok so long to roll such a feature out might exist due to the reason that it did not take the kind of infrastructure required for this sort of affair. Virtually social media platforms that use 2FA did not outset out similar this, they merely adopted it once it became commonplace. Hence, TikTok's delay is certainly understandable, and now that information technology has been rolled out users will be able to feel a lot more secure while using the app.

With the number of personal business relationship hacks on the rise, many internet services now offer users the ability to implement 2-factor hallmark, or 2FA as information technology is sometimes known. With ii-cistron authentication, even if the hacker has your password, they will need your phone or security cardinal to go into your account.

Hallmark factors are categories of credentials used to verify that someone or something is who or what they are claiming to be. There are three categories: 1) Knowledge factors – these are credentials that the user knows, typically a username and password. two) Possession factors – these are things that the user has, typically a mobile telephone. 3) Inherence factors – these are things that the user is, typically a biometric feature such as a fingerprint or an iris design. Stiff authentication means the system is using two or more of these options.

In May 2022, Google announced a one-year study it did in partnership with New York University and the Academy of California, San Diego. The trio institute that SMS ii factor authentication blocked 96 pct of bulk phishing attacks, and 76 percent of targeted attacks trying to crevice into your Google account.

If you would similar to add together two-factor authentication to your social media accounts, we recommend downloading an authenticator app on your smartphone, such as Google Authenticator or Duo Mobile. Sending your smartphone a text bulletin for your two-factor authentication, is still more secure than only using a stand-alone password, however, if the hacker has got your physical device they could yet get into your accounts.

Hither'southward how you can set upwardly two-cistron authentication on social media platforms with these apps (available for free on both iOS and Android smartphones).

Facebook

To turn on or manage two-cistron hallmark:

  1. Go to your Security and Login Settings.
  2. Scroll down to 'Utilize ii-gene authentication' and click 'Edit'.
  3. Choose the security method you want to add together and follow the on-screen instructions.

If you're using an authenticator app the method you'll want to cull is 'Login codes from a 3rd political party hallmark app.'

From and then on whenever yous sign into Facebook it will request a six-digit code that can exist constitute when you lot open the authenticator app.

Snapchat

To ready two-factor hallmark on Snapchat follow these steps:

  1. Tap ⚙️ in My Profile to open 'Settings'
  2. Tap 'Ii-Gene Authentication'
  3. Tap 'Continue' to finish setting it up!

Then, select that you are using an authenticator app. As with Facebook, after 2-factor authentication has been set up, your authenticator app will generate a unmarried-use code that only piece of work for a short amount of time, each time yous login to Snapchat.

How to add two-factor authentication to steam

Instagram

The procedure on Instagram is slightly more complicated. To set two-factor authentication:

  1. Tap or your profile picture show in the bottom correct to become to your profile.
  2. Tap in the top correct, so tap 'Settings'.
  3. Tap 'Security' then scroll down and tap 'Two-Factor Authentication'.
  4. Tap side by side to 'Authentication App', then tap 'Set Upwardly Manually'. If you don't come across the toggle switch, tap 'Become Started'.
  5. Tap 'Copy Key' below the Instagram key and paste it into your hallmark app
    • Please annotation: Information technology is important to copy the key code to your clipboard, take a screenshot, or save it in another way since you won't be able to admission the code once again once you've finished setting upwardly.
  6. After your Instagram business relationship is linked to your authentication app, re-create the half-dozen-digit code your authentication app creates.
  7. Get back to the Instagram app, tap 'Adjacent' and paste the 6-digit lawmaking to complete the process on that device.

Twitter

To add your two-gene hallmark on Twitter:

  1. In the tiptop menu, tap your 'profile' icon, then tap 'Settings and privacy'.
  2. Tap 'Account', then tap 'Security'.
  3. Tap 'Two-gene authentication'.
  4. And then select: 'Authentication app.'

It is also worth mentioning that this technology does non require an internet connection or phone service to use, meaning y'all can login with ii-factor authentication at any time. This is because the time counter used in the app that provides you with an upwardly-to-date code is synced with the current time on your phone. The customer and server therefore remain in sync as long equally the arrangement times remain the same.

Nevertheless, at that place are a few things to be aware of though when using authentication apps. The app will need to be up to appointment with the latest software version, and if you alter telephone y'all will need to login to the service provider on your web browser and click 'Alter Phone' to update your details, every bit well as scanning a barcode in the app on your new phone. This is considering it is the phone itself that is linked direct to the authentication process, and only one device can be linked at 1 time.

If y'all plant this mail service helpful, we recommend reading these previous posts:

Net security is a big bargain, and it is something that the vast bulk of social media companies and platforms out there place a lot of emphasis on. After all, most users are not going to be interested in a site that isn't secure, and frequent security breaches can lead to users being concerned their privacy, worrying that they might not be able to get the same level of safe that they desire.

TikTok, arguably the fastest growing social media platform in the earth, has lagged behind in this area. In spite of the fact that a lot of users accept been asking the platform time and time again to meliorate its security, the social media platform has for some reason greatly delayed the rollout of two step security measures that have become commonplace in most other social media platforms that have managed to achieve a lot of success in the marketplace based on the services they provide.

It seems similar TikTok is finally wising up based on a number of users noting that 2 factor authentication (2FA) has at present been widely rolled out. Y'all will get the selection to receive a code on your phone through SMS before you can log in, making it and then that fifty-fifty if someone has your password they would nevertheless need access to your phone in order to exist able to get the security code you volition receive.

I reason why it took TikTok so long to roll such a feature out might exist due to the reason that it did not have the kind of infrastructure required for this sort of thing. Most social media platforms that use 2FA did not start out like this, they merely adopted information technology once information technology became commonplace. Hence, TikTok'south delay is certainly understandable, and at present that information technology has been rolled out users will exist able to experience a lot more secure while using the app.