Your Steam account: Access from new computer

[Rafapim]

I get this email about 10x a day. I have 2fa but it's getting really annoying.

I changed my password a million times, double checked that my pc has no virus, created a very long and complicated password with numbers and symbols, set my account to private etc.

And even if my pc has a very hidden keylogger I also try changing my password through my iPhone and other computers, and without logging again in my home computer I get another email that someone with my password tried to log in to my steam.

Maybe this is that some major security flaw with steam? maybe a linked service that gets my password when I change, or someone in family sharing has a virus in their pc that's getting my new password? (when I change my password my brother that's on family sharing doesn't have to retype my password to play my games so maybe? idk)

Please help. Anyone with the same problem got it fixed?

[Rafapim]

Diposting pertama kali oleh Dr.Shadowds 🐉:

Diposting pertama kali oleh Rafapim:

Ok now it's becoming weird, I created a Gmail and changed my steam email to it. But I'm still getting those emails of someone trying to enter my account on my hotmail/outlook, not my gmail that is now assigned to my steam.

Then as I assume those are most likely fake emails.

If you want check something, open one of those email you're getting on your hotmail, but don't click anything in it, hover your mouse over the link, and you see a highlight to the bottome left of your bowser URL address, and read it.

That's the weirdest part, it really is a legit steam email. All links go to "https://help.steampowered.com" or "https://store.steampowered.com" or "https://steamcommunity.com" and the email is from "[e-mail]"

[Muppet among Puppets]

And the name in the email text is your login name to the letter? And not part of the email address?

[Rafapim]

Diposting pertama kali oleh Muppet among Puppets:

And the name in the email text is your login name to the letter? And not part of the email address?

The other strange part is, when I try to login here I get the code notification on my steam app, not my email. But when this person tries I don't get anything in the app, just my email, and the email that's not even longer assigned to my steam account.

[Dr.Shadowds 🐉]

That's more strange, as once you have change email, and verify change, all notices should be pushed to new email, such as 2FA, password forget, and more. As your Hotmail shouldn't be getting anything from Steam any longer.

Then I have to assume something is up with outlook. Do change password on your hotmail account. I can't remember the path, but there's away to view login history for your hotmail account.

[Rafapim]

Diposting pertama kali oleh Dr.Shadowds 🐉:

That's more strange, as once you have change email, and verify change, all notices should be pushed to new email, such as 2FA, password forget, and more. As your Hotmail shouldn't be getting anything from Steam any longer.

Then I have to assume something is up with outlook. Do change password on your hotmail account. I can't remember the path, but there's away to view login history for your hotmail account.

I changed the hotmail password in the middle of this, and still continues. And I changed my steam password again after making the new email and the confirmations go to the new email. Only these login notices go to the old one, strange.

But I found an option on my 2fa settings in steam to unauthorize all previous devices, no new email so far, i'll give an update tomorrow.

[Muppet among Puppets]

Diposting pertama kali oleh Rafapim:

Diposting pertama kali oleh Muppet among Puppets:

And the name in the email text is your login name to the letter? And not part of the email address?

Yes, is this one (), so I don't think is another user that is using my email on his account.
The other strange part is, when I try to login here I get the code notification on my steam app, not my email. But when this person tries I don't get anything in the app, just my email, and the email that's not even longer assigned to my steam account.

Remove your login name from this post.

The question is still, is that name part of the email address as well?

[Dr.Shadowds 🐉]

Do you have anything here?
https://steamcommunity.com/dev/apikey (there should be nothing in this page, if you see APIkey delete them)

[Wolfsun]

Diposting pertama kali oleh Rafapim:

Diposting pertama kali oleh Dr.Shadowds 🐉:

Then as I assume those are most likely fake emails.

If you want check something, open one of those email you're getting on your hotmail, but don't click anything in it, hover your mouse over the link, and you see a highlight to the bottome left of your bowser URL address, and read it.

That's the weirdest part, it really is a legit steam email. All links go to "https://help.steampowered.com" or "https://store.steampowered.com" or "https://steamcommunity.com" and the email is from "[e-mail]"

Checking the link destination by hovering over it is a good start - just be advised that what you see can easily be a spoof pointing to where you expect it to point but actually going some place else.

[Joke]

It could be that you have a different account that you forgot about, with the same hotmail adress registered, and that someone is trying to recover it. (they might think it's theirs, or just trying to steal it)

1. Use a web browser to access https://store.steampowered.com/
2. Go to login (log out first if you're logged in already).
3. Pretend that you forgot your password and then choose "I forgot my Steam Account name or password"
4. Enter your hotmail adress and click "search".

See if it finds an account. If it does, try logging in.
(Recover the account if you can't figure out the password)

[Rafapim]

Diposting pertama kali oleh Muppet among Puppets:

Diposting pertama kali oleh Rafapim:

Yes, is this one (), so I don't think is another user that is using my email on his account.
The other strange part is, when I try to login here I get the code notification on my steam app, not my email. But when this person tries I don't get anything in the app, just my email, and the email that's not even longer assigned to my steam account.

Remove your login name from this post.

The question is still, is that name part of the email address as well?

I though there was no problem, but my real login have numbers

[Rafapim]

Diposting pertama kali oleh Dr.Shadowds 🐉:

Do you have anything here?
https://steamcommunity.com/dev/apikey (there should be nothing in this page, if you see APIkey delete them)

I only see an option to create one, so I guess it's empty

[Rafapim]

Diposting pertama kali oleh Joke:

It could be that you have a different account that you forgot about, with the same hotmail adress registered, and that someone is trying to recover it. (they might think it's theirs, or just trying to steal it)

1. Use a web browser to access https://store.steampowered.com/
2. Go to login (log out first if you're logged in already).
3. Pretend that you forgot your password and then choose "I forgot my Steam Account name or password"
4. Enter your hotmail adress and click "search".

See if it finds an account. If it does, try logging in.
(Recover the account if you can't figure out the password)

I THINK YOU GOT IT, I did that, and "recovered" my account, and it is a completely blank account made with my email, it's not mine at all. So maybe someone put the wrong email when creating a steam account and it's trying to login.

I'll delete this account and see if the emails stops.

So I guess the "hacker" never knew my password in the first place.
I'll update tomorrow to see if I get any new emails.

[Dr.Shadowds 🐉]

Diposting pertama kali oleh Rafapim:

Diposting pertama kali oleh Joke:

It could be that you have a different account that you forgot about, with the same hotmail adress registered, and that someone is trying to recover it. (they might think it's theirs, or just trying to steal it)

1. Use a web browser to access https://store.steampowered.com/
2. Go to login (log out first if you're logged in already).
3. Pretend that you forgot your password and then choose "I forgot my Steam Account name or password"
4. Enter your hotmail adress and click "search".

See if it finds an account. If it does, try logging in.
(Recover the account if you can't figure out the password)

I THINK YOU GOT IT, I did that, and "recovered" my account, and it is a completely blank account made with my email, it's not mine at all. So maybe someone put the wrong email when creating a steam account and it's trying to login.

I'll delete this account and see if the emails stops.

So I guess the "hacker" never knew my password in the first place.
I'll update tomorrow to see if I get any new emails.

Keep us posted.

Diposting pertama kali oleh Rafapim:

Diposting pertama kali oleh Dr.Shadowds 🐉:

Do you have anything here?
https://steamcommunity.com/dev/apikey (there should be nothing in this page, if you see APIkey delete them)

I only see an option to create one, so I guess it's empty

That correct that means it's empty.

[Muppet among Puppets]

Diposting pertama kali oleh Rafapim:

Diposting pertama kali oleh Muppet among Puppets:

Remove your login name from this post.

The question is still, is that name part of the email address as well?

I though there was no problem, but my real login have numbers

In original emails is the LOGIN name.
If its anything else, its not an original/about your account for sure.

[Rafapim]

Diposting pertama kali oleh Joke:

It could be that you have a different account that you forgot about, with the same hotmail adress registered, and that someone is trying to recover it. (they might think it's theirs, or just trying to steal it)

1. Use a web browser to access https://store.steampowered.com/
2. Go to login (log out first if you're logged in already).
3. Pretend that you forgot your password and then choose "I forgot my Steam Account name or password"
4. Enter your hotmail adress and click "search".

See if it finds an account. If it does, try logging in.
(Recover the account if you can't figure out the password)

You got it! no more emails after I recovered that account with my email.

Thanks for everyone that replied and helped me !