API Key keeps changing?

[YEG]

I would like to know, why is my steam api key changing after a period of time? this is kind of annoying. I would like to understand how can I get it to be fixed/static?

[J4MESOX4D]

Probably because your account is shadow-hijacked maybe? Do you even know what an API key is or why you have it? As a precaution, I would do these:-

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey

[YEG]

I am using my API Key for discord to check for game join codes and verify them using my discord bot.

[J4MESOX4D]

Originally posted by Yeg:

I am using my API Key for to check for game join codes and verify them using my discord bot.

What is the key changing to though - is it a recognised domain or something you can trace? If not, there is a strong possibility you are compromised and hijackers sitting idle are changing it themselves to intercept any potential trade offers negating any changes you make. A key would not change by itself.

[YEG]

I am super sure I am not hijacked .. and my key was ending with *****08B and now it's ******E7DD ... this is the second time it changes or maybe the third .. and there is no one who has access to my account but me .. plus I have steam guard on and I change my password from time to time out of a habit

[Snapjak]

Just do what J4MES suggests and if it still persists report it to Valve.

It should never change without you going in, and if it is then you probably already did give your account info away somehow and don't realize it. Steam Guard won't protect against that.




Oh you can also check here to see if there are any logins outside of your area.
https://help.steampowered.com/en/accountdata/SteamLoginHistory

[J4MESOX4D]

Originally posted by Yeg:

I am super sure I am not hijacked .. and my key was ending with *****08B and now it's ******E7DD ... this is the second time it changes or maybe the third .. and there is no one who has access to my account but me .. plus I have steam guard on and I change my password from time to time out of a habit

Steam Guard is just a security layer - it doesn't mean you're immune to being hijacked. All you have to do is enter your credential set into a phishing window once and you can be hijacked without your knowledge and this could be the case for months to even years with scammers idle-sitting on your account waiting for the right time to strike. Thousands of users get affected by this daily on Steam and 99.99% are totally oblivious to what's happened until it's too late. Changing password whilst your account is login-botted elsewhere won't do anything.

I would do the steps in posted for peace of mind and then create a new key. Just keep monitoring it going forward.

[YEG]

Originally posted by J4MESOX4D:

Originally posted by Yeg:

I am super sure I am not hijacked .. and my key was ending with *****08B and now it's ******E7DD ... this is the second time it changes or maybe the third .. and there is no one who has access to my account but me .. plus I have steam guard on and I change my password from time to time out of a habit

Steam Guard is just a security layer - it doesn't mean you're immune to being hijacked. All you have to do is enter your credential set into a phishing window once and you can be hijacked without your knowledge and this could be the case for months to even years with scammers idle-sitting on your account waiting for the right time to strike. Thousands of users get affected by this daily on Steam and 99.99% are totally oblivious to what's happened until it's too late. Changing password whilst your account is login-botted elsewhere won't do anything.

I would do the steps in posted for peace of mind and then create a new key. Just keep monitoring it going forward.

I followed/am following the steps .. and deauthorized all other devices .. and checked the login history as Snapjak mention and all logins are only me... this is so strange.. I included the new key in my code and let's see how long before it's changed again .... then I will update this post.