How many Steam Accounts am I allowed to have ?

[Hans Yolo <°(((><]

I wonder how many I may register with my own email accounts for private use and no hacking/botting or whatsoever you might imagine ?

[Cathulhu]

Technically, there is no limit.

[cSg|mc-Hotsauce]

As many as you like, within reason.

[Hans Yolo <°(((><]

Yes, but I created a few and then I could not register anymore.
Also Steam did not allow me to use the same password on more than a few accounts, which is annoying and also concerning as a security issue, that the login can determine how often a used password is stored in steams databases and can obviously read it out as plain text so it can be compared in an Algorithm.

[Pscht]

Originally posted by Hans Yolo <°(((><:

Yes, but I created a few and then I could not register anymore.
Also Steam did not allow me to use the same password on more than a few accounts, which is annoying and also concerning as a security issue, that the login can determine how often a used password is stored in steams databases and can obviously read it out as plain text so it can be compared in an Algorithm.

Your "security issue" is that you use the same password everywhere.

[Cathulhu]

Nonsense. Valve does not need to save passwords in plaintext to do that. A SALTed HASH will do the same in that regard.
Not a security issue.

You re-using passwords, THAT is a security issue.

[Hans Yolo <°(((><]

Originally posted by Pscht:

Your "security issue" is that you use the same password everywhere.

It is no security issue, since I only use it for my steam accounts, and they are not related to each other, have different emails and are completely seperated, I see not in which way this would offer any advantage for hackers because there are no traces that lead from one account to another with the same password.

The security Issue is, that a website can read out the passwords from steams database and compare the used password with all of them and even tell the person trying to make an account, how many accounts with the same password do exist, if the maximum number of accounts with the same password is reached.

I am pretty sure it is a security issue in valve's handling of login data. I am an IT security expert. I never have security issues myself.

Valve should not be able to compare passwords. They do not meet my high security expectations. Guys, one day you will see, they will get hacked like all other companies these days, that do not meet the maximum security standards, and then you will cry.

[Cathulhu]

Once again, Valve does not store passwords. Valve is not Sony.

Valve only stores a HASH or a password that was additionally SALTed.

[KalGimpa]

Originally posted by Hans Yolo <°(((><:

Originally posted by Pscht:

Your "security issue" is that you use the same password everywhere.

It is no security issue, since I only use it for my steam accounts, and they are not related to each other, have different emails and are completely seperated, I see not in which was this would offer any advantage for hackers because there are no traces that lead from one account to another with the same password. The security Issue is, that a website can read out the passwords from steams database and compare the used password with all of them and even tell the person trying to make an account, how many accounts with the same password do exist, if the maximum number of accounts with the same password is reached. I am pretty sure it is a security issue in steams handling of login data. I am an IT security expert. I never have security issues myself.

that has been standard for years.

steam knows who you are, how many accounts you have and which use the same passwords. it is not something you can hide unless you use a vpn to create each one, but you would not be seeing that if you were

and no matter what you say, using the same pass for any other account is crazy

[Hans Yolo <°(((><]

Originally posted by Cathulhu:

Once again, Valve does not store passwords. Valve is not Sony.

Valve only stores a HASH or a password that was additionally SALTed.

You have any sources for that claim ?

[Crazy Tiger]

Originally posted by Hans Yolo <°(((><:

The security Issue is, that a website can read out the passwords from steams database and compare the used password with all of them and even tell the person trying to make an account, how many accounts with the same password do exist, if the maximum number of accounts with the same password is reached.

Have you considered that it is not actually comparing the whole database, but just the ones from the same location?

Originally posted by Hans Yolo <°(((><:

I am an IT security expert.

Saying that doesn't actually provide credibility.

[Hans Yolo <°(((><]

Originally posted by KalCuey:

and no matter what you say, using the same pass for any other account is crazy

Ok Mister, then explain me, how any hacker would use that as an advantage !
I will listen, and read all your arguments, but I know already, you cannot explain how a hacker would step by step use it for his advantage. It is impossible.

[KalGimpa]

Originally posted by Hans Yolo <°(((><:

Originally posted by Cathulhu:

Once again, Valve does not store passwords. Valve is not Sony.

Valve only stores a HASH or a password that was additionally SALTed.

You have any sources for that claim ?

why? standard security protocols exist. if you choose to bypass them, for whatever reason, why should people need to explain to you why you shouldn't?

this is a serious question, because i cannot for the life of me figure out why a person would want to use the same pass for everything?

[KalGimpa]

Originally posted by Hans Yolo <°(((><:

Originally posted by KalCuey:

and no matter what you say, using the same pass for any other account is crazy

Ok Mister, then explain me, how any hacker would use that as an advantage !
I will listen, and read all your arguments, but I know already, you cannot explain how a hacker would step by step use it for his advantage. It is impossible.

what?

why would i take even a moment to explain why it is smart to have separate passwords for saperate accounts?

i mean, even my 70+ year old parents know better

[Hans Yolo <°(((><]

Originally posted by Crazy Tiger:

Have you considered that it is not actually comparing the whole database, but just the ones from the same location?

Good argument m8, no I did not, because it does not matter much in the end, if you would be right, but the Steam login message says different.

Originally posted by Hans Yolo <°(((><:

I am an IT security expert.

Saying that doesn't actually provide credibility.

Haha, I know, I just want to point out, that I am not a noob that requires to get his hand held, to register a steam account.

[Hans Yolo <°(((><]

Originally posted by KalCuey:

what?

why would i take even a moment to explain why it is smart to have separate passwords for saperate accounts?

i mean, even my 70+ year old parents know better

I knew you would not be able to find any plausible argument, since those accounts are not in any way connected as I mentioned before. Look m8.


Person A creates a Steam account, and uses Password A.
Person B creates a Steam account, and uses Password A.


In which way is this a security issue ?
Ok if 10000 or 100000 people would use the same password, then I guess it would slowly turn into one.