New Login Method is Awful :: Steam Discussions

Всички дискусии > Steam форум > Steam Discussions > Подробности за темата

AG 7 ноем. 2022 в 11:37

New Login Method is Awful

Hi Steam,

Why can't I just copy>paste my password since the update?. I don't have a phone with the mobile login app thingy, and I wouldn't use it if I did because that stuff isn't secure.

So I've got a complicated password that I now have to type out by hand. Can we just paste it in please like before?.

Regards,
An older gamer who thinks if it ain't broke don't fix it.

< >

Показване на 16-29 от 29 коментара

RiO 9 ноем. 2022 в 13:40

Първоначално публикувано от ReBoot:
Първоначално публикувано от RiO:
Was there a set of release notes somewhere that stated they finally actually officially made a fix for this? Because that would honestly be a great first step into fixing the mess with how Steam sets up its data management between different Windows user accounts.
Not "would", "is". That's kinda my point here, it already is.
As for the patch notes, that change goes back years. I can't remember whether there were notes about this.

Ok. Then indeed it's another case of this stuff being bugged again. Because multi-user login behavior with remembered credentials being broken came up fairly recently still in the Steam beta forums. A new round of reports started back up for it, back in Jan/Feb this year with this thread:
https://steamcommunity.com/groups/SteamClientBeta/discussions/0/3180106719130485587/

Indeed: at one point it did work correctly; but whatever thing Valve jiggered together in lieu of what the OS itself provides, so they could keep at least the remembered credentials isolated per Windows user, got busted again when they started futzing with the login system trying to glue in the new React-based sign-on experience.
And evidently, last occurrence in that thread being dated Nov 6, it is still broken and a problem now.

Последно редактиран от RiO; 9 ноем. 2022 в 13:46

#16

Yayo 9 ноем. 2022 в 14:00

#17

tiger305 9 ноем. 2022 в 15:34

ag is correct , at least here on my pc, I have to manually
type pw in.. no more copy/paste....

#18

ReBoot 9 ноем. 2022 в 21:54

Well, broken indeed. That's news.

#19

ReBoot 9 ноем. 2022 в 22:06

Първоначално публикувано от RiO:
Първоначално публикувано от ReBoot:
Not "would", "is". That's kinda my point here, it already is.
As for the patch notes, that change goes back years. I can't remember whether there were notes about this.

Ok. Then indeed it's another case of this stuff being bugged again. Because multi-user login behavior with remembered credentials being broken came up fairly recently still in the Steam beta forums. A new round of reports started back up for it, back in Jan/Feb this year with this thread:
https://steamcommunity.com/groups/SteamClientBeta/discussions/0/3180106719130485587/

Indeed: at one point it did work correctly; but whatever thing Valve jiggered together in lieu of what the OS itself provides, so they could keep at least the remembered credentials isolated per Windows user, got busted again when they started futzing with the login system trying to glue in the new React-based sign-on experience.
And evidently, last occurrence in that thread being dated Nov 6, it is still broken and a problem now.

I then shall stand corrected, thanks for the heads-up!

#20

AG 17 ноем. 2022 в 14:43

As another user has pointed out, I can't copy paste, and now steam is refusing to start in offline mode. So I have to login by typing the password, and then log offline. A few days after I had this issue I was just able to start steam in offline mode without a password at all.

Pain in the ass. Prioritising GOG from now on.

Последно редактиран от AG; 17 ноем. 2022 в 14:43

#21

Reggaejunkiedrew 17 ноем. 2022 в 15:36

Първоначално публикувано от Trollhammer:
So, a 2FA isn't secure but copy pasting a password is OK...

Well, obviously OP is wrong in their claim that the 2FA is insecure, but when you use a password manager and all of your passwords are long and unique, not being able to just copy paste a password is extremely annoying.

Yes, there is a risk of accidentally pasting it somewhere else, but that's entirely down to user error and not quantifiable. Not something I've ever done and a risk I will gladly take opposed to the hellish existence that typing out my passwords manually would be.

#22

AG 18 ноем. 2022 в 9:17

I don't know what 2FA is. If it's related to the mobile phone scan tool thingy then it's less secure by its existence because it's another device that's related to my password. As opposed to human memory. Which I don't think people can access remotely just yet.

Since I've now memorized my password from typing it out so much.

Последно редактиран от AG; 18 ноем. 2022 в 9:19

#23

Washell 18 ноем. 2022 в 9:40

Първоначално публикувано от AG:
I don't know what 2FA is. If it's related to the mobile phone scan tool thingy then it's less secure by its existence because it's another device that's related to my password. As opposed to human memory. Which I don't think people can access remotely just yet.

If you are copy/pasting, you either have a password manager or a textfile/spreadsheet you're copy/pasting, which is far more vulnerable than 2FA. Which is probably the reason Valve disabled copy/pasting.

Security experts recommend phasing out passwords altogether in favor of 2FA/2SV systems.
https://blog.google/technology/safety-security/a-simpler-and-safer-future-without-passwords/
https://gagadget.com/en/126026-apple-google-and-microsoft-to-phase-out-passwords-next-year/
https://advantageservices.net/should-passwords-be-phased-out/

You're making decisions here about your online security without proper foundational knowledge in the field. This makes you distrust the most secure option and opt for some of the worst practices around. You know how trivial it is for malware to capture keystrokes or read out the copy/paste buffer? They don't need to hack your memory, just the keyboard buffer.

#24

AG 18 ноем. 2022 в 13:13

@Washell That's a fair response. But I'm still in a situation where Steam has made a decision based on the assumption that we all have modern phones. I also never keep money in the account I use for Steam/online purchases until needed.

Why have they also (seemingly in the last few days) made the decision to prevent you from logging in offline? As I said I have to login and then log offline. The main reason I kept Steam offline was to prevent these updates and further game updates to working/modded games.

If Steam creates these systems that make it a nuisance to use for people like me (and I'm sure I'm in a tiny minority) and they're doing it because hacking is so common, then all the more reason not to buy games from them anymore.

#25

Zefar 18 ноем. 2022 в 13:32

Първоначално публикувано от AG:
If Steam creates these systems that make it a nuisance to use for people like me (and I'm sure I'm in a tiny minority) and they're doing it because hacking is so common, then all the more reason not to buy games from them anymore.

"Hacking" is so rare it probably doesn't happen.
People willingly give away their account information to scammers posing as Valve Employees or Steam Employees. Doesn't matter how many warnings they put up.

With Steam Mobile App a "hacker" would have to literally find you in the real world, steal your phone while also getting you to unlock it before using it and then be able to get into your Steam account.
It's not happening.

Also why not just have Autologin turned on? You're obviously not afraid to lose your password seeing how it is far easier for a program to steal it if you keep Copying it into the clipboard.
Autologin would be both safer and less of a hassle for you.

#26

AG 19 ноем. 2022 в 8:18

So it seems to be changing by the day. I now can't play offline. Previously I could disconnect from the internet and just start steam and then the game. Now I have to login every time.

I'm sure people were complaining about this years ago. Not sure if you're given a choice about updating games, but that was always the issue for me.

#27