Steam Authenticator & Multi-Factor Security

[btnMash]

I like that Steam has added two-factor authentication options with their new authenticator app. However, I'd also like to see them support other 3rd party authenticator utilities like this. For one, I have a Windows Phone and that platform isn't supported with the new app. But perhaps more importantly, I already have an authenticator app which works basically identically like this one and I use regularly for many of my accounts...

Does anyone know if there's some way to register one of these apps to take advantage of two-factor authentication with Steam, or if they plan to allow for this option in the future?

[davidcommons]

new system work badly for me, the codes regen after 30sec...less time than it takes for me to get the SMS lol...oh well nice idea.

[Black Blade]

Over all Valve seem to prefer to do things in-home
But i do agree that supporting a 3rd party may be a pretty good idea for things like you said with the windows phones

[Buho]

Google Authenticator should be tested...

[Satoru]

The authenticator is standard TOTP

[DUST2ONLY]

great idea

[knofikation]

Yeah, Steam should totally add TOTP support.

Their in-house algorithm sounds more like their finance division said that the smartphone apps are supposed to have more users.

[btnMash]

Satoru님이 먼저 게시:

The authenticator is standard TOTP

It sure seems that way; on the front end at least. However, there's no barcode or key that is made visible during registration since it's all handled by the app... so no way to use Google Authenticator or Azure Authenticator...

At least not that I saw.

[Satoru]

https://winauth.com/2015/06/11/steam-guard-mobile/

If you're that against using the smartphone app

[btnMash]

Satoru님이 먼저 게시:

https://winauth.com/2015/06/11/steam-guard-mobile/

If you're that against using the smartphone app

Have you read what I've written at all? I'm not against using Valve's mobile app. I simply can't, because they don't support my platform of choice. Moreover I would prefer to simply use the app I already have.

This link does make it sound like you can use 3rd party options, but it doesn't really say how... Other 2FA apps I've used require either a QR code or manually typing in a key.

How do you get either of those for Steam?

[Kartoffelsuppe]

I would like to use this but I don't use apps at all & my mobile phone only for doing telephone calls. Sounds weird right? Using a device only for one thing & for what it was actually invented.

I hope there is something similar in the future that isn't restricted to something that I don't have. That code creation programm should come with a device or something for people who don't wanna bother with apps or how to integrate the authenticator into other already existing technical devices.

[Start_Running]

Black Blade님이 먼저 게시:

Over all Valve seem to prefer to do things in-home
But i do agree that supporting a 3rd party may be a pretty good idea for things like you said with the windows phones

There's a reason for that. They have their own vision on what and how they want things to be done. When you have to work with 3rd party for things like security and whatnot well then that's secure data... leaving your system and up to the whims of the other party's security.

Turth be told TFS isn't really the necessary. All you really need is a strong password and good security practices.

[Forcen]

A decent workaround could be that you add an authenticator to your email instead. Now your email is pretty damn safe and you can't log in to your steam account without the code that gets sent to your email right?

Just use an email that supports authentication the way you want it: https://twofactorauth.org/#email

In fact, is there any benefit in using the steam app for authentication over using an authenticator on your email? I guess it depends how easy someone can gain access to your email account via any pc you are logged into vs gaining access to your smart phone.

Is there any other benefit with the steam app? Malware can still steal that damn steam guard file and trick other installations that you have been logged in for 14 days and steal your items right?

[SpriteXP]

Another vote for Windows Phone support and the use of the Authenticator app like every other website does including Facebook, Microsoft, Github, Google and Mailchimp.

[Start_Running]

SpriteXP님이 먼저 게시:

Another vote for Windows Phone support and the use of the Authenticator app like every other website does including Facebook, Microsoft, Github, Google and Mailchimp.

Do any of these sites store user financial assets and data?

[btnMash]

Start_Running님이 먼저 게시:

SpriteXP님이 먼저 게시:

Another vote for Windows Phone support and the use of the Authenticator app like every other website does including Facebook, Microsoft, Github, Google and Mailchimp.

Do any of these sites store user financial assets and data?

Yes. Microsoft includes your Microsoft account, which is tied to the Windows store purchases such as apps, music and videos. Facebook can also be used to authenticate many sites and apps, some of which may contain payment information - and even if not, they contain a wealth of personal data.

I don't believe for a second that Valve's choice to make this quasi-proprietary is to improve security.