Steam API Key.

[Scooby Doooby]

Guys my steam account was hacked 2 days and basically all my skins are gone for.
Fortunately I have reset my password and till now I have access to my account including the games. One of my friends recommended me to revoke the API key of steam so that I am not a part of such malicious activity/trade offers.
Could you guys tell me about the API key and are their any disadvantages if you revoke an API key?
Also I would want to know if I do not revoke the API key and try to add funds to my steam wallet would it be safe?
Help would be really appreciated guys! Thanks :)
P. S - would you guys recommend to add money to your steam wallet via credit card without revoking for an API key?

[Scooby Doooby]

Steam API Key.

Guys my steam account was hacked 2 days and basically all my skins are gone for.
Fortunately I have reset my password and till now I have access to my account including the games. One of my friends recommended me to revoke the API key of steam so that I am not a part of such malicious activity/trade offers.
Could you guys tell me about the API key and are their any disadvantages if you revoke an API key?
Also I would want to know if I do not revoke the API key and try to add funds to my steam wallet would it be safe?
Help would be really appreciated guys! Thanks :)
P. S - In short I just wanna know is my account still in control of the hijacker even after resetting my password?

[J4MESOX4D]

The API key is used to control trades on your account. If the key is compromised, hijackers can cancel, send bogus trade offers and redirect items you trade to their account which is why items get stolen. The API key field should really be blank.

Also ALL steps here must be completed in order and without fail to properly secure your account:-

- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey
- Refrain from giving away your credentials to phishing sites

[Scooby Doooby]

Could you give me more information on the steam wallet thing? I am willing to add funds later then.

[cSg|mc-Hotsauce]

Do everything posted first.

[J4MESOX4D]

Originally posted by Scooby Doooby:

Could you give me more information on the steam wallet thing? I am willing to add funds later then.

Secure your account and then add wallet funds. If a hijacker still has botted access then any money you add they can spend.

If your API key houses a domain or any other numbered reference then any trade you make in the future will just get cancelled and the hijackers will send out a spoofed trade offer impersonating your intended target and your items will get swiped again.

Priority is to secure your account entirely with the recommended steps.

[Scooby Doooby]

What is the domain name? While I register my API key?

[Unic0rn]

check the domain name

[Scooby Doooby]

Yeah but how to check the domain name?

[JPMcMillen]

Originally posted by Scooby Doooby:

Yeah but how to check the domain name?

Just delete any and all API keys your account may have. Generally speaking, nobody needs one. I've had an account for 16.5 years and I've never had nor needed one.

[SpunkyJones]

If you don’t know what a api key does, then you don’t need it. Delete what’s in there and leave it blank. Has nothing to do with adding money to the Wallet.

[Scooby Doooby]

How to delete it? Can you please help me.

[Scooby Doooby]

Do you mean go to the site and log out?

[Glimmer]

https://steamcommunity.com/dev/registerkey
If a key is registered, click the button labelled "Revoke My Steam Web API Key"

If it's asking you to enter a domain name, you do not have an API key so there's nothing to revoke.