Got a message saying Steam Account Credentials have Changed, but they haven't

All Discussions > Steam Forums > Help and Tips > Topic Details

MegaMetal83 Mar 26, 2019 @ 8:31pm

I left my PC on most of the day locked, but unattended. When I came back to it, there was a message saying that Steam Account Credentials have Changed on the screen and wanted me to log in again. I put my login info in it and it asked me for my authentication code. I can't remember if the code popped up on my phone or not, but I think it did. I got worried and closed steam because the screen looked like an official Steam screen but a little different, and logged in on the site. It worked, so I changed my password and my email and phone were correct, also no purchases were made. I got an email saying my password was changed when I manually changed it, but nothing earlier. Also, no games have showed up in my recently played list that I didn't play recently, and all my games are there. I did a scan with malwarebytes and it found nothing.

I did a Google search and some people were saying this happened when they were on a different PC/Wi-Fi (I haven't been), or that there internet cut out (mine did when I was using it, but as far as I know it hadn't when I wasn't because I was playing a lot of MW3 and World at War on PS3, but there was an electrician in my house working on the room with the router).

Is this some Steam bug, or should I be worried about a security issue?

< >

Showing 1-15 of 25 comments

Alz Mar 26, 2019 @ 8:39pm

Almost sounds like a third-party trying to get control over your account or something like that! I mean since you said you weren't so sure if it was "steam official".

LimminL Mar 26, 2019 @ 8:39pm

It has happened to me before, but like you said, it was because I was using a different computer, personally, if you have changed the password and you are fairly sure you haven't logged onto any shady 3rd party sites, you should be fine.
Having said that, if you are worried, perform a scan of your computer, check that you have no APIs linked to your account, genererate new backup codes, make sure your 2FA is linked to your own phone and like you did, change your password. If you have done all of this, you really should be safe from anyone trying to gain access to your account. :)
Hope this helps!

Earth Mar 26, 2019 @ 8:48pm

that never happend to me, probley cause i have a wireless modem. but,if someone does get to ur acc, before that happpens, create a back up on an (SSD,HDD,USB Flash Drive,or a Blank Disk)
soo ur games can possibly be uploded to a new acc when u create it, so u wont have to repurchase them.

LimminL Mar 26, 2019 @ 9:24pm

Originally posted by WASUP?:
that never happend to me, probley cause i have a wireless modem. but,if someone does get to ur acc, before that happpens, create a back up on an (SSD,HDD,USB Flash Drive,or a Blank Disk)
soo ur games can possibly be uploded to a new acc when u create it, so u wont have to repurchase them.

Don't post misinformation, games are locked to an account not a computer or purchaser. Besides, if OP secures his/her account properly that wont be an issue in the first place. Backing up games is only used to reinstall games quickly to accounts that already own the games.

The HopelessGamer™ Mar 26, 2019 @ 9:27pm

This is a random issue... has happened to me a few times. Before signing back in, check your emails to make sure nothing has actuallly changed. If it has you will be emailed about it. Once you know nothing is changed, go ahead and sign back in. So far it just seems like a bug.

Si-Fi Mar 26, 2019 @ 9:34pm

If you were logged into Steam on your phone, that may have triggered the sudden message but unintentionally so its likely a bug but has Mr.THG mentioned, keep an eye on your e-mail.

MegaMetal83 Mar 26, 2019 @ 10:32pm

Originally posted by Limminl23:
It has happened to me before, but like you said, it was because I was using a different computer, personally, if you have changed the password and you are fairly sure you haven't logged onto any shady 3rd party sites, you should be fine.
Having said that, if you are worried, perform a scan of your computer, check that you have no APIs linked to your account, genererate new backup codes, make sure your 2FA is linked to your own phone and like you did, change your password. If you have done all of this, you really should be safe from anyone trying to gain access to your account. :)
Hope this helps!
:isitcoffee:

What is API's? Also, I did scan with malwarebytes and nothing was found. 2FA is on my phone, as I did use it to log back in. The only non-steam site I have logged into is GOG, and that was with the program they have to link your steam account to get any eligible steam games on GOG as well.

What do you mean by generate new backup codes?
EDIT: Figured out how to generate backup codes and just got new ones. Also, verified my number.

Last edited by MegaMetal83; Mar 26, 2019 @ 10:40pm

LimminL Mar 26, 2019 @ 11:52pm

Originally posted by Gamer4000:
What is API's? Also, I did scan with malwarebytes and nothing was found. 2FA is on my phone, as I did use it to log back in. The only non-steam site I have logged into is GOG, and that was with the program they have to link your steam account to get any eligible steam games on GOG as well.

What do you mean by generate new backup codes?
EDIT: Figured out how to generate backup codes and just got new ones. Also, verified my number.

Revoke any/all api keys you find here https://steamcommunity.com/dev/apikey. If you dont know what APIs are there should be none there.

APIs are Application Programming Interfaces, in laymens terms, it allows one application or site to communicate with another. So if you, say log into a dodgy site with your password and 2FA code, that site can then set up an API on your account, granting them access to certain parts of your account, even if you change your password. Things like editing your profile and redirecting trades.

EDIT: And it's worth mentioning that so long as it was actually GoG, you have nothing to worry about, GoG is a legitmate launcher.

Last edited by LimminL; Mar 26, 2019 @ 11:54pm

Earth Mar 27, 2019 @ 7:42pm

Originally posted by Limminl23:
Originally posted by WASUP?:
that never happend to me, probley cause i have a wireless modem. but,if someone does get to ur acc, before that happpens, create a back up on an (SSD,HDD,USB Flash Drive,or a Blank Disk)
soo ur games can possibly be uploded to a new acc when u create it, so u wont have to repurchase them.
Don't post misinformation, games are locked to an account not a computer or purchaser. Besides, if OP secures his/her account properly that wont be an issue in the first place. Backing up games is only used to reinstall games quickly to accounts that already own the games.
:isitcoffee:

or send the files to the other acc

LimminL Mar 27, 2019 @ 7:49pm

Originally posted by WASUP?:
Originally posted by Limminl23:
Don't post misinformation, games are locked to an account not a computer or purchaser. Besides, if OP secures his/her account properly that wont be an issue in the first place. Backing up games is only used to reinstall games quickly to accounts that already own the games.

or send the files to the other acc

Nope, games must be repurchased for every new account, games cannot be simply 'transferred' to a new account. That is how the system works. I am done arguing about this.

#10

Earth Mar 31, 2019 @ 11:17am

Originally posted by Limminl23:
Originally posted by WASUP?:
or send the files to the other acc
Nope, games must be repurchased for every new account, games cannot be simply 'transferred' to a new account. That is how the system works. I am done arguing about this.
:isitcoffee:

but u could get a refund for it. soo ur not just wasting ur money on a game u already have.

#11

The Giving One Mar 31, 2019 @ 1:10pm

Originally posted by WASUP?:
but u could get a refund for it. soo ur not just wasting ur money on a game u already have.

The refund may go back to the wallet on that account, if the wallet was used to make the purchase originally, and wallet funds cannot be transferred to another account either.

Also, there are limits as to time played and time owned for refunds, so that's not really a viable solution to anything.

EDIT...

Not to mention the fact that this is not what the refund system is for, really.

Last edited by The Giving One; Mar 31, 2019 @ 1:12pm

#12

Darren Mar 31, 2019 @ 9:16pm

Originally posted by The Giving One:
Originally posted by WASUP?:
but u could get a refund for it. soo ur not just wasting ur money on a game u already have.
The refund may go back to the wallet on that account, if the wallet was used to make the purchase originally, and wallet funds cannot be transferred to another account either.

Also, there are limits as to time played and time owned for refunds, so that's not really a viable solution to anything.

EDIT...

Not to mention the fact that this is not what the refund system is for, really.

Also if you own the account and games you *should* have ample ability to just recover the account once you have removed any malware from your PC and/or phone that allowed them to hijack the account in the first place.

#13

The Giving One Apr 1, 2019 @ 1:04am

Originally posted by Darren:

Also if you own the account and games you *should* have ample ability to just recover the account once you have removed any malware from your PC and/or phone that allowed them to hijack the account in the first place.

Exactly. I can only assume that the other user did not or was not fully aware of that at the time of my comment, but your are right. Thanks.

#14