Safari - I'm constantly logged out of Steam

[sleepingmouse]

Why?! I have that I have to login every week basically.
Fix it please!

[potato]

use a real browser

[( ( < < <🤖> > > ) )]

there is youtubes fixes for safari logging people out.... not steam specific...

[Satoru]

Steam will keep you logged in for months

Issues with that are generally when your browser or a 3rd party application kills your cookies

[sleepingmouse]

The thing is that I only register these problems with Steam. For months. All other services, for example Reddit or Amazon, can remember my login and don't ask me to log in over and over.

Safari is a good browser. Steam doesn't need any fancy features it can't do.

I really see the fault on Steam's side.

[m662]

Is this on a mobile device or desktop? Apple has a function called Hide IP Address in Safari that proxies (or masks) your real connection. The problem with this is the exit node the IP you get can change and if your IP changes your session cookie the thing keeping you logged in becomes invalid.

This can be the reason of your issue.

https://www.macrumors.com/how-to/hide-your-ip-address-from-trackers-ios/

[Ilmari]

I have this same problem. Have to log in separately to the store and community, and in either case the login won't last very long, sometimes not even a day. Safari is very privacy-oriented these days with cookies etc, so I assume it follows from that, but I also agree with the OP that Steam is the only site that has this problem, so there must be something they're doing wrong or idiosyncratically.

Edit: and since Steam/Valve is all about libertarian laissez-faire dollar pragmatism, let me put it this way – this has already caused me to postpone or forget about making purchases in cases where I find my way to a game's page from some other website or service, and can't even add it to wishlist without Steam Guard hassle or starting up Steam (if I'm even on the computer).

[electronx]

Same with Firefox.
As said above, the login cookie expires in a few days. One of the two domains at least.
Since I don't normally visit from a browser so often, I just stopped logging in.
Which is a bit silly because recently they added a big notification that I should.
Steam URL could be a workaround.

(We've gotten to the point where security actively hinders usability.)

[RiO]

Originally posted by electronx:

(We've gotten to the point where security actively hinders usability.)

Nah- this is a problem with third-party cookies and Valve's solution to synchronizing the login across store.steampowered.com and steamcommunity.com is woefully behind the curve and still relying on those in an age where browsers are phasing them out and making it impossible to keep them around longer than a few days. (Which defeats their predominant modern use: tracking and profiling.)

What Valve should do is set up a proper federated login where you actually log in on something like login.steampowered.com - and where both the store and the community domains redirect you to said login domain to obtain a valid token.
If you're already signed in there, the redirect instantly returns with the credentials needed to complete session establishment in the store or community. If you're not, you get the login prompt.

Easy-peasy; lemon-squeezy.
An industry standard formalized in specifications like OAuth, OIDC and others.
And with literally a decade of time behind it to prove it works in practice.


As is usual though, Valve isn't using it yet. Because they're operating on Valve Time.
So maybe somewhere in the 2030s - if we're so lucky; otherwise probably the 2050s.
/s

[sleepingmouse]

And again. I just check all checkboxes saying "remember" let's se...

[sleepingmouse]

@RiO thanks for details!

I thought it would be something like this. I'm sorry Valve is missing out on such an important thing. It's all about the user experience, which is really ♥♥♥♥♥♥, on the desktop.

[Ç!ｲ!乙3η-ﾒ]

Guys this is a long shot but do any of you log into third party sites using your steam accounts??

It could be that you account is compromised and someone else is logging into your account from a different location/ip..

Check that your API key has no text in the domain entry field using the steam link below....


Revoke/Delete the API key here: https://steamcommunity.com/dev/apikey (Domain name should be empty)

If you find any text in there that you did not place then your account is compromised..... Use this link to help with the security of your account:

https://help.steampowered.com/en/faqs/view/6639-EB3C-EC79-FF60