this guy somehow got my password

[porn addict]

this guy added me and he wanted to trade and he asked me for my username so i gave it to him. im not worried about him getting into my account because my password is very complex, 16 digits including 4 symbols, 4 numbers, 4 lowercase letters, and 4 uppercase letters in a random order. but then i get a notification on my phone telling me my steam authenticator code to sign in. how did this guy get my password from knowing my username??

EDIT: Thanks for the help everyone, I never thought that by giving someone your username they could know your password immeadiatly. I will go reset my entire account now

[I love fat bitches that squirt]

Maybe tried to reset or soemthing just reset it again and create a really complex password and dont forget you have mobile auth without your phone he carnt get in well very low chance ^^ also make sure your email is secure ^

[Luca94]

Never provide your account name or other sensitive data.

[Captain Pentium]

You'd be surprised. Change your password immediately. You're first mistake was giving out any information about your account.

[porn addict]

Originally posted by Luca94:

Never provide your account name or other sensitive data.

??? didnt know username was sensitive info
thanks for the help, i will change immeadiatly

[Zekiran]

YOU gave the guy info.

That's the basic idea behind "don't ever do that" which is stated very clearly literally every time you log on to chat.

[Jonno.exe]

Originally posted by null:

this guy added me and he wanted to trade and he asked me for my username so i gave it to him.

Why would you do that for? Trades should only occur through the steam trade window which requires the users to be friends WITHOUT the need for sensitive info such as username/password.

I suggest changing all of your credentials immidiately including password, email and possibly phone number

[MaddDoktor [Linux]]

If you get a code for a password reset, and you did not request that, you could probably ignore that and the scammer should not be able to steel your account, unless they infected your computer with something that would allow them to get your e-mail login.

I had someone attempt to reset the password of my support account from an IP address that traced to Ukraine (maybe a year or two ago). My old password still worked, so I ignored that. But I run Linux which is not subject to Windows exploits. I don't know how they even got the username, because it was a different username that I only used at work, different from either of my 2 Steam accounts.

[porn addict]

Originally posted by MaddDoktor Linux:

If you get a code for a password reset, and you did not request that, you could probably ignore that and the scammer should not be able to steel your account, unless they infected your computer with something that would allow them to get your e-mail login.

I had someone attempt to reset the password of my support account from an IP address that traced to Ukraine (maybe a year or two ago). My old password still worked, so I ignored that. But I run Linux which is not subject to Windows exploits. I don't know how they even got the username, because it was a different username that I only used at work, different from either of my 2 Steam accounts.

but the guy somehow KNEW my password, idk where he got it. Luckily the Steam Mobile Authenticator saved my stupid ass

[Jonno.exe]

Originally posted by null:

Originally posted by MaddDoktor Linux:

If you get a code for a password reset, and you did not request that, you could probably ignore that and the scammer should not be able to steel your account, unless they infected your computer with something that would allow them to get your e-mail login.

I had someone attempt to reset the password of my support account from an IP address that traced to Ukraine (maybe a year or two ago). My old password still worked, so I ignored that. But I run Linux which is not subject to Windows exploits. I don't know how they even got the username, because it was a different username that I only used at work, different from either of my 2 Steam accounts.

but the guy somehow KNEW my password, idk where he got it. Luckily the Steam Mobile Authenticator saved my stupid ass

Do you use the same password elsewhere? If so then thats where they got it from.

[porn addict]

Originally posted by Jonno:

Originally posted by null:

but the guy somehow KNEW my password, idk where he got it. Luckily the Steam Mobile Authenticator saved my stupid ass

Do you use the same password elsewhere? If so then thats where they got it from.

The password I use for Steam is the same password I use for student email at my university... but no one can access that one besides me. I don't think any administrators or professors can access it.

[SLR]

SAD:(