Limit the amount of logins you can have in a steam account.

[HEADSHOT chacha]

I believe there should be a default feature to limit the number of sessions you can have for 1 steam account..the default limit must be 2(1 for current PC that is logged in, 1 is for mobile for authentication purposes)

The user should be able to be change the limit from profile settings(while doing so, please warn the users of potential problems he can face..)

On a default level..i would even recommend that the dev tools for the steam profiles should also be disabled, maybe some third party websites that are officially linked with steam might be using them once you have created you profile..but where is the point of privacy when these websites haven't taken your concent to access your steam profile data?


If this points have been already suggested..plz close this thread and post the links in comments

I would also love to know if anything similar has already been implemented
(a more powerful alternative then what i have suggested).

Thanks and regards,
Ahmed Abdul Salam

[cSg|mc-Hotsauce]

What about the Chat app? I have all 3 running.

All sites can do is gather public data that is available. The option is to go friends only or private. You consented when you kept you stuff public for everyone to see.

[HEADSHOT chacha]

Iam specifically speaking about the number of sessions you can be active at any given time, in the sense...i cannot login into devices more then two, if i need to login to new devices, i must log out of any currently logged in devices

Not about the data that is being utilised or the data i wish to share to the public

(For example, the limit on number of devices that can connect to your wifi/personal hotspot)

Edit- in the case of chat app, yes let the default be 3 in your case cauz you can always change the number of devices you want to connect in your profile settings

[Supafly]

Originally posted by HEADSHOT chacha:

Iam specifically speaking about the number of sessions you can be active at any given time, in the sense...i cannot login into devices more then two, if i need to login to new devices, i must log out of any currently logged in devices

I often leave my PC on downloading when I'm out of the house. Often I will have either my tablet using web browser or laptop with Steam client logged in at the same time. If I was limited to 2 active devices I'd have to remotely stop PC downloading by forcing a logout or sign out my Tablet or laptop when I need to use my phone to access the mobile app for trading/selling confirmations.

There should be no restriction to the amount of devices we login on. Prevent us from playing games on multiple devices at the same time but not restricting where and when we can login.

Originally posted by HEADSHOT chacha:

but where is the point of privacy when these websites haven't taken your concent to access your steam profile data?

Same as everything else on the web. If you set your details to private they can't access your details.

[AmsterdamHeavy]

What would be the point of this? Im not getting that in the OP.

[KillahInstinct]

Originally posted by HEADSHOT chacha:

On a default level..i would even recommend that the dev tools for the steam profiles should also be disabled, maybe some third party websites that are officially linked with steam might be using them once you have created you profile..but where is the point of privacy when these websites haven't taken your concent to access your steam profile data?

What?

Originally posted by AmsterdamHeavy:

What would be the point of this? Im not getting that in the OP.

I agree. I'm confused why this would need to be an option. If you're the sole user of the account, which you're supposed to be, you don't need to worry to limit accounts. Just don't give out your password and use 2FA and you're good.

[wuddih]

https://steamcommunity.com/discussions/forum/9/1636418037470976110/

OP got phished a few days ago and the usual profile description "your account will be banned"/etc scam happend.

and this here is the try to shove the blame and responsibility.

[Brian9824]

Yep, just dont give out your info and your good. I mean even if they implemented the OP's suggestion they would still login and kick him off if he gave away his account info.

[Satoru]

1) stop logging into shady websites because you want free stuff and you won’t be hijacked

2) problem solved

The idea fundamentally doesn’t understand how authentication works especially now that a lot of steam is web session based

You’re solving the wrong problem

[HEADSHOT chacha]

1 - I have no intention on pushing my problem onto others.

2 - yes I did mistake and I learnt from it. But this is not related to that..but this is the outcome thinking of that, but turns out this post dosent make sense

3 - I don't go for free stuff :), I buy straight from market with the money I earn, but I don't want to discuss here* about what happened with me in last week.

4 - plz close/lock this topic, cauz I think I should not delete this thread due to other people's time has been invested.

[HEADSHOT chacha]

Originally posted by Suicidal Monkey:

Originally posted by HEADSHOT chacha:

Iam specifically speaking about the number of sessions you can be active at any given time, in the sense...i cannot login into devices more then two, if i need to login to new devices, i must log out of any currently logged in devices

I often leave my PC on downloading when I'm out of the house. Often I will have either my tablet using web browser or laptop with Steam client logged in at the same time. If I was limited to 2 active devices I'd have to remotely stop PC downloading by forcing a logout or sign out my Tablet or laptop when I need to use my phone to access the mobile app for trading/selling confirmations.

There should be no restriction to the amount of devices we login on. Prevent us from playing games on multiple devices at the same time but not restricting where and when we can login.

Originally posted by HEADSHOT chacha:

but where is the point of privacy when these websites haven't taken your concent to access your steam profile data?

Same as everything else on the web. If you set your details to private they can't access your details.

That's exactly why I was also suggesting, atleast for a user with no prior experience like me, we can always change the number of devices we can connect via profile edit options, and while doing so the steam can notifiy for the possible problems the user can face.

With that being said people don't intentionally do wrong stuff (atleast my mindset is such that I buy everything from community market and from no where else...), they are tricked to do so by some experiencnced nuts.

But what's gone is gone, there is no returning back..mistakes have been made and the lessons have been learnt.

[ KARR™]

Originally posted by HEADSHOT chacha:

That's exactly why I was also suggesting, atleast for a user with no prior experience like me, we can always change the number of devices we can connect via profile edit options, and while doing so the steam can notifiy for the possible problems the user can face.

Still can't really see the point though. If you use 2FA you will want at least two available and if you stream to another machine you're going to want to have three.

Because you don't need to log INTO the 2FA device to log into your account you will have at least 1 'available' to be used, which could then be used by someone hijacking you.

I assume this is the reason it's suggested, but anyone with 2FA on will probably have a free slot to be used unless they go into the hassle of logging into it and don't just use the notification or widget to get the code.

[Supafly]

Originally posted by HEADSHOT chacha:

[
That's exactly why I was also suggesting, atleast for a user with no prior experience like me, we can always change the number of devices we can connect via profile edit options, and while doing so the steam can notifiy for the possible problems the user can face.

Self changeable limit makes it pointless. You'd need to give other sites access to your account in the same way users give phishing sites their login details. So site will say login

Username
Password
Steam guard code

Then an extra step explaining how to give them permission and you change your setting to allow them to access your account.

As people already give phishing sites Username, password and Steam Guard code they will blindly give them permission just as they did with the rest of their login details. It will only frustrate other users that have to p about when they want to use other devices. While not protecting those that'd get phished who already do exactly what phishers ask for anyway.

EDIT: The weakest link in any security is the user. No matter how many hoops companies put in place the stupid, naive, rash, greedy or other definition you want to call them users will still jump through the hoops and compromise their accounts. And they will also be the ones complaining about having more and more hoops to jump through.

[HEADSHOT chacha]

Ok guys, ya'll have proven the point. please close this thread, its leading to nowhere.

and being a professional, i have to admit, its my bad that i haven't done much research prior to starting this discussion.

[The HopelessGamer™]

Originally posted by HEADSHOT chacha:

On a default level..i would even recommend that the dev tools for the steam profiles should also be disabled, maybe some third party websites that are officially linked with steam might be using them once you have created you profile..but where is the point of privacy when these websites haven't taken your concent to access your steam profile data?

So... you do know that you cannot disable the browser developer tools?

Also if your profile is public, all data on there is deemed as public information and is therefor allowed to be used by third party websites without requiring consent unless stated elsewhere on the website.

If a website wants to make changes to your profile in anyway then you must sign in for this to happen and by doing so your giving them consent.

[HEADSHOT chacha]

Originally posted by The HopelessGamer™:

Originally posted by HEADSHOT chacha:

On a default level..i would even recommend that the dev tools for the steam profiles should also be disabled, maybe some third party websites that are officially linked with steam might be using them once you have created you profile..but where is the point of privacy when these websites haven't taken your concent to access your steam profile data?

So... you do know that you cannot disable the browser developer tools?

Also if your profile is public, all data on there is deemed as public information and is therefor allowed to be used by third party websites without requiring consent unless stated elsewhere on the website.

If a website wants to make changes to your profile in anyway then you must sign in for this to happen and by doing so your giving them consent.

Yes that's correct.