How do I unlink all websites that I signed up with Steam?

[Blueberry]

I signed up on a few CS2 trading sites as well as this site called [REDACTED] (Which is useless btw) and I think I wanna just disconnect all my associations of these sites to my Steam account. How do I unlink these accounts? For [REDACTED] I deleted my account but for the CS trading sites I don't see an option to delete my account so now I'm stuck here...

[Lithurge]

Assuming you're using two factor authentication go here and de-authorize all devices.

https://store.steampowered.com/twofactor/manage

You'll also want to change your password.

By logging into those sites you've basically given them access to your account. Never login to a site that asks you to directly enter your login, password and steamguard code, unless it's Steam itself.

Forgot you'll also want to make sure there's no API key, you can check through the link below, if there is revoke it.

https://steamcommunity.com/dev/apikey

[Blueberry]

Originally posted by Lithurge:

Assuming you're using two factor authentication go here and de-authorize all devices.

https://store.steampowered.com/twofactor/manage

You'll also want to change your password.

By logging into those sites you've basically given them access to your account. Never login to a site that asks you to directly enter your login, password and steamguard code, unless it's Steam itself.

Forgot you'll also want to make sure there's no API key, you can check through the link below, if there is revoke it.

https://steamcommunity.com/dev/apikey

When I signed up to these sites (they were SkinPort and CSFloat) they just took me to Steam with a green button saying “Sign in”. I just clicked it and it was done. Is that considered 2FA?

[rawWwRrr]

Originally posted by Kurai:

Originally posted by Lithurge:

Assuming you're using two factor authentication go here and de-authorize all devices.

https://store.steampowered.com/twofactor/manage

You'll also want to change your password.

By logging into those sites you've basically given them access to your account. Never login to a site that asks you to directly enter your login, password and steamguard code, unless it's Steam itself.

Forgot you'll also want to make sure there's no API key, you can check through the link below, if there is revoke it.

https://steamcommunity.com/dev/apikey

When I signed up to these sites (they were SkinPort and CSFloat) they just took me to Steam with a green button saying “Sign in”. I just clicked it and it was done. Is that considered 2FA?

That would be considered part of Single-Sign-On (SSO), and actually the preferred way to sign into other sites with Steam. Any time you are being asked for username/password, it's very likely a phishing attempt. Getting the green in Sign In means you're already signed into Steam and the 3rd party site is just asking for a Steam token to identify you.

[Blueberry]

Originally posted by rawWwRrr:

Originally posted by Kurai:

When I signed up to these sites (they were SkinPort and CSFloat) they just took me to Steam with a green button saying “Sign in”. I just clicked it and it was done. Is that considered 2FA?

That would be considered part of Single-Sign-On (SSO), and actually the preferred way to sign into other sites with Steam. Any time you are being asked for username/password, it's very likely a phishing attempt. Getting the green in Sign In means you're already signed into Steam and the 3rd party site is just asking for a Steam token to identify you.

yep, at most I just entered my trade URL. Unfortunately I don't see a way to delete my account on the sites themselves so I would like to do it here. Is there a way? Do I just remove my Steam Mobile Authenticator and it's done?

Also, does revoking my API key remove it from every site I put it on? I want to be sure that it can't be taken advantage of

[Lithurge]

Originally posted by Kurai:

Originally posted by rawWwRrr:

That would be considered part of Single-Sign-On (SSO), and actually the preferred way to sign into other sites with Steam. Any time you are being asked for username/password, it's very likely a phishing attempt. Getting the green in Sign In means you're already signed into Steam and the 3rd party site is just asking for a Steam token to identify you.

yep, at most I just entered my trade URL. Unfortunately I don't see a way to delete my account on the sites themselves so I would like to do it here. Is there a way? Do I just remove my Steam Mobile Authenticator and it's done?

Also, does revoking my API key remove it from every site I put it on? I want to be sure that it can't be taken advantage of

Good to hear they're legitimate sites, there are so many posts about people being hijacked by bad sites it's easy to make assumptions.

Yes revoking your API would invalidate it for all sites it's been used on.

[Blueberry]

Originally posted by Lithurge:

Originally posted by Kurai:

yep, at most I just entered my trade URL. Unfortunately I don't see a way to delete my account on the sites themselves so I would like to do it here. Is there a way? Do I just remove my Steam Mobile Authenticator and it's done?

Also, does revoking my API key remove it from every site I put it on? I want to be sure that it can't be taken advantage of

Good to hear they're legitimate sites, there are so many posts about people being hijacked by bad sites it's easy to make assumptions.

Yes revoking your API would invalidate it for all sites it's been used on.

Yep, I read a couple of Reddit threads about the site's history before doing anything.

So far I have my API key in buff163 but I decided to revoke it as I found out I can't easily top up money on that site as it's Chinese anyway. I also put in my trade URL there.

The other one is FreeCash, but I deleted my account and hopefully they scrapped my data...? Not sure because that site literally makes you do surveys for data collection.

So is there a way to just un-sign up via Steam? Because I contacted the site's help email and they rambled on about how they would help me wipe my data but till now it hasn't been done.

So 4 sites total, 1 where I deleted my account but I'm 75% sure my data is not gone, 1 where I have my API key that I revoked + trade URL, 2 which I signed up with Steam and can't delete

[Lilim]

Originally posted by Kurai:

yep, at most I just entered my trade URL.

Have you already changed your trade url?

[Lilim]

Originally posted by Lithurge:

Good to hear they're legitimate sites...

This does not mean that these sites are not scam sites.

There are other ways of scamming besides phishing (unsupported trades, middleman trading, rigged gambling, etc.).

All third-party sites are use at own risk! There are no "legit" third-party sites.

[Blueberry]

Originally posted by Lilim:

Originally posted by Kurai:

yep, at most I just entered my trade URL.

Have you already changed your trade url?

yep.Changed trade URL, revoked API key.

Main reason I don't wanna use these trade sites is because recently I kept seeing YouTubers get sponsored by them and it got me thinking how aggressive these sites are in making you use their site. And then they make you stay by offering gambling or daily loot boxes which I do not want to use.

Should I do anything else or is there nothing else I can do about the single-sign on system?

[Lilim]

Originally posted by Kurai:

yep.Changed trade URL, revoked API key.

Should I do anything else or is there nothing else I can do about the single-sign on system?

You also deauthorized all other devices and changed your password?

[VaLiuM]

You can also go here and check what websites you have recently logged into:

https://help.steampowered.com/de/accountdata/ThirdPartyLogins

Then you go to these directly and simply log out. EZ.

Edit: That only removes the current login ofc but not the informations the site may have already stored about your account, since that is server-side.

That may require an additional removal request by contacting the site owner(s) demanding account deletion / data removal.

If you are in the EU, you can request that to happen in compliance with the GDPR.

[Blueberry]

Originally posted by Lilim:

Originally posted by Kurai:

yep.Changed trade URL, revoked API key.

Should I do anything else or is there nothing else I can do about the single-sign on system?

You also deauthorized all other devices and changed your password?

yup. Am I clean now?

[✪ Bachir]

I signed into csfloat but I regret doing that , how can i unlink it

[Lithurge]

Originally posted by ✪ BaChiiR:

I signed into csfloat but I regret doing that , how can i unlink it

Originally posted by Lithurge:

Assuming you're using two factor authentication go here and de-authorize all devices.

https://store.steampowered.com/twofactor/manage

You'll also want to change your password.

You'll also want to make sure there's no API key, you can check through the link below, if there is revoke it.

https://steamcommunity.com/dev/apikey

[Yuki]

This thread was quite old before the recent posts, so we're locking it to prevent confusion.