Someone keeps logging into my Steam account

[CYPHER ULTIMATE]

I've changed Steam Guard to new device, changed password, changed email password, made sure there is no Steam API key, but someone keeps logging into my account as I have found from the "Recent Login History" tab in my account info.

I've reinstalled windows twice, ran Antivirus scans multiple times, but it seems that there are just more and more people logging into my account from different locations.

What can I do????

[JPMcMillen]

Deauthorize all other devices https://store.steampowered.com/twofactor/manage

[CYPHER ULTIMATE]

Originally posted by JPMcMillen:

Deauthorize all other devices https://store.steampowered.com/twofactor/manage

Any other things that I can do?

[JPMcMillen]

Originally posted by gamer95:

Originally posted by JPMcMillen:

Deauthorize all other devices https://store.steampowered.com/twofactor/manage

Any other things that I can do?

Nothing I can think of. If you completely wiped the system there shouldn't be any kind of spyware on the machine unless it's buried deep on the hard drive, deeper than even a format will wipe.

[reg1s7]

Recent Login History?
I find a lot of entry in my recent login history. Basically, everytime I close steam mobile app then open it again (I do not reenter password), it counts as a login in recent login history.

I think it is possible that the same case happen to you. I advise to take note everytime you open mobile app, and at the end of day compare it with recent login history. You may find that all of them are actually your own login.

[CYPHER ULTIMATE]

Originally posted by es3826:

Recent Login History?
I find a lot of entry in my recent login history. Basically, everytime I close steam mobile app then open it again (I do not reenter password), it counts as a login in recent login history.

I think it is possible that the same case happen to you. I advise to take note everytime you open mobile app, and at the end of day compare it with recent login history. You may find that all of them are actually your own login.

It's a different location my guy, someone from another state is logging into my account

[reg1s7]

Originally posted by gamer95:

It's a different location my guy, someone from another state is logging into my account

In my case, it often records different city, even in different province. I advise to ignore the location, just take note on the timestamp.

For the others reading this, please help us to clarify whether your "recent login history" is also like this. Thanks.

[CYPHER ULTIMATE]

Originally posted by es3826:

Originally posted by gamer95:

It's a different location my guy, someone from another state is logging into my account

In my case, it often records different city, even in different province. I advise to ignore the location, just take note on the timestamp.

For the others reading this, please help us to clarify whether your "recent login history" is also like this. Thanks.

Are you sure about this? How do you know it isn't someone logging into your account?

[reg1s7]

Originally posted by gamer95:

Originally posted by es3826:

In my case, it often records different city, even in different province. I advise to ignore the location, just take note on the timestamp.

For the others reading this, please help us to clarify whether your "recent login history" is also like this. Thanks.

Are you sure about this? How do you know it isn't someone logging into your account?

I keep my antivirus up-to-date and scan regularly. I also use strong password and change it periodically.
I am not too worried because even in google search, sometimes it shows location that is 2 hours air travel away from my actual location.

[reg1s7]

One note, I want to confirm that you have strong unique password. Please do not use weak, easy to guess password like "hunter2". Steam supports up to 64 characters of password, I recommend you to use at least 20 characters, including number and symbol. Please also do not use password that you have used on other site.

Guide for creating strong password that is easy to be remembered:
https://youtu.be/Pe_3cFuSw1E
https://youtu.be/3NjQ9b3pgIg

[Snapjak]

Relevant xkcd as usual.

https://xkcd.com/936/

[Bee🐝]

If you think your account is still compromised - just do the following steps. Although, it seems like you've done all the basics we recommend:

Originally posted by Cheezus Crisp:

Steps to take NOW:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

THE important thing is to try and ascertain how your account might've been compromised - it couldn't have been just a "hack" - you would've had to provide your login details to the scammer. Most obvious ones are from using shady off Steam sites or you handing to derails over to a scammer posing as Steam Support.

Edit: So if you haven't done the above, your account might not actually be compromised.

Edit 2: Easier way to see if someone is actually logging into your account. Start a new "testing" Steam account - obviously with a new password - if you're still getting "odd" log entries on the new account then it could just be an aberration in the recording. On a clean PC, no scammer can go through two different Steam accounts that quickly!

[reg1s7]

Originally posted by Erik:

Originally posted by es3826:

In my case, it often records different city, even in different province. I advise to ignore the location, just take note on the timestamp.

For the others reading this, please help us to clarify whether your "recent login history" is also like this. Thanks.

Are you sure about this? How do you know it isn't someone logging into your account?

I keep track of my "recent login history" for few days. I do not found anything suspicious, the timestamp is synchronized with my usage time, but the city is different. Even in current active session, it shows as login from another province.

[Supafly]

Originally posted by es3826:

Originally posted by Erik:

Are you sure about this? How do you know it isn't someone logging into your account?

I keep track of my "recent login history" for few days. I do not found anything suspicious, the timestamp is synchronized with my usage time, but the city is different. Even in current active session, it shows as login from another province.

Happen to me all the time. I ignore the location and only focus on the correct times.

The fact you've wiped the system, deauthorised all devices, no api key and changed password you should be safe

[Sinister[tnuC]]

Is it something to do with your ISP? I live in Cairns which is in northern Australia, but my connection always says Sydney which is 2500kms away. its just how my ISP works

[CYPHER ULTIMATE]

Originally posted by SinistertnuC:

Is it something to do with your ISP? I live in Cairns which is in northern Australia, but my connection always says Sydney which is 2500kms away. its just how my ISP works

I don't know