I keep getting emails from STEAM that i am trying to log in

[Boaba]

This thing has been going for at least 2 years, And no matter what I do the hacker keeps finding my password. I'm worried that if I don't change my password soon the hacker will breach my account. Now only one time it happened to enter my account but luckily i was quick to make a help account and get it back. Is there anything I can do to stop getting attacks?

[urma botta]

Sounds like you should secure your device. Scan for malware.

As long as you have steam guard enabled, you should be fine.

I would also recommend you change your steam password again to something completely different.

[Boaba]

Originally posted by lll jr.:

Sounds like you should secure your device. Scan for malware.

As long as you have steam guard enabled, you should be fine.

I would also recommend you change your steam password again to something completely different.

I've been changing my password for quite a while now, but now its way more frequently. Also i will try to scan my PC for any malware, but it never really was an issue since i never got any warnings. I'll scan it tomorrow since i can't right now

[DC-GS]

Check the emails, what account is getting logged in.
In most cases it's an long forgotten alt account running on same email.

[Boaba]

Originally posted by DC-GS:

Check the emails, what account is getting logged in.
In most cases it's an long forgotten alt account running on same email.

I've changed my email to one that has no accounts on it.

[Boaba]

Plus it's also changing IP's and i don't own any VPNs

[DC-GS]

Depending on ISP, IP change daily.

Do you happen to use any 3rd party sites with "steam login", trading for example? Or voting?

The emails you are talkin about are Guard emails with codes for login?

[Boaba]

Originally posted by DC-GS:

Depending on ISP, IP change daily.

Do you happen to use any 3rd party sites with "steam login", trading for example? Or voting?

The emails you are talkin about are Guard emails with codes for login?

Ip change in different locations of the world.
I don't use any more 3rd part websites.
Yes guard email codes

[urma botta]

Originally posted by Dumb 15yo #SaveTF2:

Originally posted by DC-GS:

Depending on ISP, IP change daily.

Do you happen to use any 3rd party sites with "steam login", trading for example? Or voting?

The emails you are talkin about are Guard emails with codes for login?

Ip change in different locations of the world.
I don't use any more 3rd part websites.
Yes guard email codes

Make sure nothing is in your API key. https://steamcommunity.com/dev/apikey

If there is something there, remove it by clicking on the revolk button.

[SteveB]

Some good advice here. There must be something that has made your computer or device a target - as suggested, perhaps some malware, etc. Although it will take time, be sure to do a full scan.

I would add:
To increase your security and comfort level: Steam Guard is indeed your friend.
To increase your security and comfort level: Make that password a L-O-N-G, complex one! I don't remember offhand how long a password Steam accepts. Make it as long as possible. It can still be something that's not hard to remember and/or type. I also don't remember offhand if Steam allows you to do things like "stay logged in on this computer" or similar. I say: DISABLE that, requiring the effort to supply your password to be entered for EVERY login.

[exe]

in addition to the other usefull advice, you should use Steam Guard to enhance the security of your Steam account (if you are not already using Steam Guard).

I recommend to use a password manager: KeePass is a free, open-source and good password manager, it's website is https://keepass.info/

with a password manager you don't have to remember and type the passwords, the password manager will do that for you.

KeePass uses an encrypted database to store your passwords and you can save more information with your passwords like on which website to use this password... KeePass has a built-in password generator

[Teksura]

Adding to the above, double-check the sender's email address. Occasionally, phishing emails go around claiming to be something like a password reset or a "someone has logged in from a new device" email to prompt you to click a link in the email and give away your details to their fake login page. If you've changed your email address associated with your Steam account and keep getting these emails on the old email address, that's a pretty good indicator that you're not getting them from Steam.

[Muppet among Puppets]

Originally posted by Dumb 15yo #SaveTF2:

I've changed my email to one that has no accounts on it.

Do these emails not appear in the new email after the change in steam?

Is the "hello name" not actually your login name but something else (as well)?

Do you use auth app?

All these 3 things each mean = these emails are fake or for another account.

[Muppet among Puppets]

Originally posted by SteveB:

Some good advice here. There must be something that has made your computer or device a target - as suggested, perhaps some malware, etc. Although it will take time, be sure to do a full scan.

I would add:
To increase your security and comfort level: Steam Guard is indeed your friend.
To increase your security and comfort level: Make that password a L-O-N-G, complex one! I don't remember offhand how long a password Steam accepts. Make it as long as possible. It can still be something that's not hard to remember and/or type. I also don't remember offhand if Steam allows you to do things like "stay logged in on this computer" or similar. I say: DISABLE that, requiring the effort to supply your password to be entered for EVERY login.

While you have good intentions,
this would not help at all if what you said was true.

If there was malware on the computer, no steam guard, no complicated and very long password, and especially no type it each time would help.

A long password only helps if someone grabs data from steam servers and can decrypt them. Same as steam guard.

You want a passphrase that can not be guessed.
And log out if your computer is on its own.

If malware is on a computer, it is too late, and you need to secure it.

[SteveB]

That's not true because Steam Guard would require you to approve a login attempt using a second device - typically your mobile phone. It's a two-factor authentication scheme which is typically quite effective in thwarting an account login even if your password is completely compromised.

Why do you think 2FA is so widely used?

[Muppet among Puppets]

Originally posted by SteveB:

That's not true because Steam Guard would require you to approve a login attempt using a second device - typically your mobile phone. It's a two-factor authentication scheme which is typically quite effective in thwarting an account login even if your password is completely compromised.

Why do you think 2FA is so widely used?

If malware leaks passwords, it also leaks 2fa (if typed)