Revoking steam api key

[Jawsh]

i was trading skins on cs.money, but when i hit confirm trade in the mobile authenticator the trade didnt go through and cs.money stated "The trade has been cancelled in Steam. You are being scammed, unless you cancel it intentionally, Your Steam account is vulnerable, your items are at risk of theft. Please follow the next steps to prevent the damage"

and listed
"1. Change your password in Steam account settings
2. Revoke the API Key issued by scammers.
3. Create new trade URL
4. Please be careful when a third-party site asks for your Steam credentials (login, password) as it is the most prominent form of hacking into accounts."

but i changed my password but what does revoking my api key do?

[Cathulhu]

It revokes the access to your account you've granted the bot by entering your login credentials on that fake website.

[Jawsh]

but what would it do to me?

[999999999]

Did it actually give you all that info on the mobile app?

[Levi]

Your trades are being manipulated due to the web API key.

The hijacker doesn't need to do anything complex.

Revoking it should stop this.

The API key scam usually occurs when you log into the clone of a trusted third-party site.

[Jawsh]

Originally posted by 999999999:

Did it actually give you all that info on the mobile app?

no it gave it to me on the trading website, which ive been using for a while

[999999999]

Originally posted by Sasuke Uchiha moat.gg:

Originally posted by 999999999:

Did it actually give you all that info on the mobile app?

no it gave it to me on the trading website, which ive been using for a while

Nice to see they are being a bit more proactive now.

All steps...

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

Revoke the api key https://steamcommunity.com/dev/apikey

[VaLiuM]

Originally posted by Sasuke Uchiha moat.gg:

but what would it do to me?

It cancels and redirects all your trades, making you lose items to someone you didn't trade with.

[Jawsh]

i revoked it, but it still cancels my trades, ill give it a day or so and ill see what happens

[999999999]

Originally posted by Sasuke Uchiha moat.gg:

i revoked it, but it still cancels my trades, ill give it a day or so and ill see what happens

Again...

Originally posted by 999999999:

All steps...

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

Revoke the api key https://steamcommunity.com/dev/apikey

[Wolf Knight]

if its still canceling, they are still in the account. waiting a day or so is a bad idea. go thru all the steps listed and get them out. you never know if the scammer will just do something to trash the account, remember, they have access to your games.

[Jawsh]

ok i
changed my password,
disabled all other devices
revoked my api
and got new backup codes,
the trade went through, thank you!

[VaLiuM]

You should be more careful in the future and double-check the sites you are using.

[B-o-B]

Seems promising though, good to hear sorta

[Orchi]

how to revoke API? i couldnt find any well instruction source to do this

[VaLiuM]

Go here https://steamcommunity.com/dev/apikey
And then there should be a button at the bottom https://i.imgur.com/v4P2aRJ.png