Do Yubikeys work with steam guard?

[VoidWhisperer]

I'm contemplating buying a yubikey to help me with alot of the services that I use 2factor authenthication on, but I'm not sure, especially after the introduction of escrow, whether or not it works with steamguard - IE, when I try to log in and it tells me to get the 2FA code from the steam mobile app, would yubikey work with that instead, so that I don't have to pull out my phone everytime i want to log into steam?

[wuddih]

nope @ title.

[VoidWhisperer]

Damnit. Why can't steam just use the standards for 2FA that are already out there?

[76561198218426745]

Originally posted by VoidWhisperer | TF2Pickup.net:

Damnit. Why can't steam just use the standards for 2FA that are already out there?

Since people are getting their computers compromised, any two-factor authentication that does not involve a separate device is essentially moot.

[VoidWhisperer]

Originally posted by habitualaction:

Originally posted by VoidWhisperer | TF2Pickup.net:

Damnit. Why can't steam just use the standards for 2FA that are already out there?

Since people are getting their computers compromised, any two-factor authentication that does not involve a separate device is essentially moot.

Yubikey is an entirely seperate, physical device.. what are you talking about..?

[Satoru]

Originally posted by VoidWhisperer | TF2Pickup.net:

Originally posted by habitualaction:

Since people are getting their computers compromised, any two-factor authentication that does not involve a separate device is essentially moot.

Yubikey is an entirely seperate, physical device.. what are you talking about..?

But it can't verify the contents of an actual trade. Making it separate is useless if you're 'authorizing' a fake trade on a phishing site.

[76561198218426745]

Originally posted by VoidWhisperer | TF2Pickup.net:

Yubikey is an entirely seperate, physical device.. what are you talking about..?

I have no idea what a Yubikey is, however people without phones have suggested a number of alternatives, and all of the suggestions which I have read have in some way involved using their PC for two-factor authorization. Hence why I said it doesn't work.

[VoidWhisperer]

A Yubikey is an external device, usually that you'd input into the computer with USB. You then press a button on it to get a OTP/2FA password, assuming that Yubikey has some form of integration with i t, which valve evidently doesn't. Google yubikey and you'll see what it is

[Majestic Marshmallow]

Originally posted by habitualaction:

Originally posted by VoidWhisperer | TF2Pickup.net:

Yubikey is an entirely seperate, physical device.. what are you talking about..?

I have no idea what a Yubikey is, however people without phones have suggested a number of alternatives, and all of the suggestions which I have read have in some way involved using their PC for two-factor authorization. Hence why I said it doesn't work.

It's a shame you didn't have access to the Internet and therefore couldn't do a quick Google check instead of butting in with completely uninformed opinions for no reason.

The fact that Steam has made their own proprietary 2FA and not allowed any standard system just shows that they are remarkably short-sighted. I have ~8 2FA account already and hope to add as many as at all possible - I would really rather have them all in one place and that is of course not going to be the Steam app.

Why are they trying to bully me in to using their sub-par system instead of having all my keys in the same place? Even ignoring the advantages to having my keys all in the same place, their offering is just worse than what I'm using already. For example the Steam app has no way of auto-typing the one-time-code on my desktop from my phone. The FIDO U2F standard is freely available, open source, tested by millions, and takes 5 minutes to set up for your software. Not even providing it as an alternative has to be done with intent. What they get from it I don't know. More downloads for their app I suppose.

[76561198218426745]

I don't know why you are necroing a two month old thread, but if you have suggestions for how Steam should improve mobile auth, there's a forum for that:
http://steamcommunity.com/discussions/forum/10/