Code Jul 21, 2022 @ 6:09am
Can you be hacked through a friend code?
Possibly a weird question, but someone I know was recently hacked on Discord. Out of nowhere that account starts asking everyone for their Steam friend code, can they do anything with it? I accidentally gave out mine. I know I am probably freaking out over nothing as it would be quite a security flaw, but I just want to be sure.

Thank you

Something went wrong while displaying this content. Refresh

Error Reference: Community_9708323_
Loading CSS chunk 7561 failed.
(error: https://community.fastly.steamstatic.com/public/css/applications/community/communityawardsapp.css?contenthash=789dd1fbdb6c6b5c773d)
Showing 1-12 of 12 comments
Fake Jul 21, 2022 @ 6:14am 
He wasn't hacked. He fell for a phishing scam.
Code Jul 21, 2022 @ 6:18am 
Yea sorry, that's what I meant. My question is, however, can he do anything now that I gave my friend code?
Fake Jul 21, 2022 @ 6:19am 
Originally posted by Code•Ω:
Yea sorry, that's what I meant. My question is, however, can he do anything now that I gave my friend code?
Secure your account if you think that it has been compromised.
Code Jul 21, 2022 @ 6:21am 
I have steam guard turned on, changed my password and had no payment methods added, should be good enough right?
Fake Jul 21, 2022 @ 6:22am 
Originally posted by Code•Ω:
I have steam guard turned on, changed my password and had no payment methods added, should be good enough right?
Check your API key. It should be blank.
Code Jul 21, 2022 @ 6:27am 
Excuse my ineptness, but how I do check an API key?
The End Jul 21, 2022 @ 6:31am 
Originally posted by Code•Ω:
Yea sorry, that's what I meant. My question is, however, can he do anything now that I gave my friend code?
Your friendcode can not be used to take over your account, your friendcode is public, I can find it in seconds as it's the last number of "Steam3: [U:1:xxxxxxx]".

What matters is not to accept random friends and if you do, do not click on links they send via chat and don't give them any personal/account info if they ask.
Last edited by The End; Jul 21, 2022 @ 6:33am
Code Jul 21, 2022 @ 6:32am 
Alright thank you, I did not click anything or accept any requests.

And yes, when I click that apikey link its blank.
Supafly Jul 21, 2022 @ 8:58am 
Originally posted by Code•Ω:
I have steam guard turned on, changed my password and had no payment methods added, should be good enough right?

Which is just an extra key. If you gave out your username, password and a Live Guard code it's useless. Thats like giving a stranger your house keys. Lock would be rendered useless.

Just sharing your friend code can't get your account copromised. they and you would need to do more.

If you are concerned do all of these to ensure the account is secure

Scan for Malware/virus https://www.malwarebytes.com/mwb-download/
Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your Account password on a secure device, mobile phone for example.
Generate new back up codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Code Jul 21, 2022 @ 11:19am 
Thanks for the tips, I did the deauthorization and also made my phone the authenticator. Obviously also scanned for malware!
Brian9824 Jul 21, 2022 @ 12:32pm 
Nothing can be done with your friend code to hack your account
Showing 1-12 of 12 comments
Per page: 1530 50

Date Posted: Jul 21, 2022 @ 6:09am
Posts: 12