Confirm purchases via mobile Authenticator

[Eldin]

We should have "Purchase confirmation" option.
When we enable it we have to confirm every Steam purchase via mobile Authenticator.

If you let kids or someone play games on your PC, they can easily purchase game, community market item or in-game currency/item in few seconds without any confirmations.

Or if someone gets unauthorized access to your account, they can spend all your wallet money.

Mobile confirmations would help preventing that from happening.

[whatamidoing]

Well, you're not supposed to be sharing your account in the first place, and you already need a code to log in.

[Snapjak]

That is kinda what family view is for, and you can set it at any time.

[wuddih]

for that family view exists. you can lock out store functionality.

[Gwarsbane]

That I can see, it would add a bit more security to stop someone who gets into your account somehow.

"Did you buy these items?"
Item #1
Item #2
Item #3
Item #4
Item #5
Item #6

Yes or No

The only thing I see annoying about this is, market items. Seeing as how you can only buy 1 item at a time unless you are buying a bunch of the same item. That would get annoying to say yes to each one individually.

Maybe when you buy them, they go in an escrow kind of thing, where they are removed for sale at the price you paid for them, but you are given a button that you can press that says "I'm buying more" and it gives you say 10 or 15 minutes to buy a bunch more till you click done. Then it sends off the mobile confirm message where you have say another 10 minutes to confirm, if not, your money is returned and the items are placed back on the market at the prices they were at.

Its not a whole lot of time, but you're not gonna spend hours on the market buying different stuff... unless you are rich and feel like it, and its not fair to hold the items in escrow for too long so I think a combined total of 20 to 30 minutes to buy and hit the yes or no button is more than fair.

[Eldin]

Originally posted by whatamidoing:

Well, you're not supposed to be sharing your account in the first place

If I share PC with multiple family members, they have rights to use all apps and play all games installed there.
And what's the difference between me and my brother playing the games installed on that PC?
Neither Steam or PC can tell the difference.

Originally posted by whatamidoing:

and you already need a code to log in.

If you're already logged in, you don't need the code.

[Snapjak]

Originally posted by Eldin:

Originally posted by whatamidoing:

Well, you're not supposed to be sharing your account in the first place

If I share PC with multiple family members, they have rights to use all apps and play all games installed there.
And what's the difference between me and my brother playing the games installed on that PC?
Neither Steam or PC can tell the difference.

Well not according to that agreement you signed when you created your account. They don't have rights to your game licenses.

[Eldin]

Originally posted by Snapjak:

Originally posted by Eldin:

If I share PC with multiple family members, they have rights to use all apps and play all games installed there.
And what's the difference between me and my brother playing the games installed on that PC?
Neither Steam or PC can tell the difference.

Well not according to that agreement you signed when you created your account. They don't have rights to your game licenses.

So they can't play Rocket League (or any other game) with me in splitscreen because they don't have rights to my game licences?

[Eldin]

Originally posted by Gwarsbane:

That I can see, it would add a bit more security to stop someone who gets into your account somehow.

"Did you buy these items?"
Item #1
Item #2
Item #3
Item #4
Item #5
Item #6

Yes or No

The only thing I see annoying about this is, market items. Seeing as how you can only buy 1 item at a time unless you are buying a bunch of the same item. That would get annoying to say yes to each one individually.

Maybe when you buy them, they go in an escrow kind of thing, where they are removed for sale at the price you paid for them, but you are given a button that you can press that says "I'm buying more" and it gives you say 10 or 15 minutes to buy a bunch more till you click done. Then it sends off the mobile confirm message where you have say another 10 minutes to confirm, if not, your money is returned and the items are placed back on the market at the prices they were at.

Its not a whole lot of time, but you're not gonna spend hours on the market buying different stuff... unless you are rich and feel like it, and its not fair to hold the items in escrow for too long so I think a combined total of 20 to 30 minutes to buy and hit the yes or no button is more than fair.

Yes, something like "Auto confirm all market purchases made in next X minutes" would be a good solution for that.

[Snapjak]

If you want to get nitpicky like that then games with local co-op or splitscreen have special licenses that let a guest play.

Otherwise no, you are the sole user and purchaser of your licenses and only family sharing grants others (temporary) access on their own accounts.



I should point out that I'm not against the idea, just that you're trying to solve one issue that's part of a bigger potential problem when there's a solution that already exists.

[Eldin]

Originally posted by Snapjak:

If you want to get nitpicky like that then games with local co-op or splitscreen have special licenses that let a guest play.

Otherwise no, you are the sole user and purchaser of your licenses and only family sharing grants others (temporary) access on their own accounts.

Where is that special licence?
Where is it written which games I can play together with someone?
Where is it written that if I can't complete a level, I can't ask my brother to try to beat it?
Where is it written that I can't play a single player game together with my cousin (racing game example: I finish one race then my cousin finish the next one, then I finish the next one, and so on)?
Where is it written that if we're already playing together, that I can't leave and let him continue playing alone?

[76561198407601200]

Originally posted by Eldin:

Originally posted by whatamidoing:

Well, you're not supposed to be sharing your account in the first place

If I share PC with multiple family members, they have rights to use all apps and play all games installed there.
And what's the difference between me and my brother playing the games installed on that PC?
Neither Steam or PC can tell the difference.

Originally posted by whatamidoing:

and you already need a code to log in.

If you're already logged in, you don't need the code.

You have that right, certainly, but you also have the risk of the exact thing that happened to you occur. Enable family sharing and climb down from that horse.

[Washell]

C. Your Account

When you complete Steam’s registration process, you create a Steam account ("Account"). Your Account may also include billing information you provide to Valve for the purchase of Subscriptions, Content and Services and any physical goods offered for purchase through Steam (“Hardware”). You may not reveal, share or otherwise allow others to use your password or Account except as otherwise specifically authorized by Valve. You are responsible for the confidentiality of your login and password and for the security of your computer system. Valve is not responsible for the use of your password and Account or for all of the communication and activity on Steam that results from use of your login name and password by you, or by any person to whom you may have intentionally or by negligence disclosed your login and/or password in violation of this confidentiality provision. Unless it results from Valve’s negligence or fault, Valve is not responsible for the use of your Account by a person who fraudulently used your login and password without your permission. If you believe that the confidentiality of your login and/or password may have been compromised, you must notify Valve via the support form (https://support.steampowered.com/newticket.php) without any delay.

Your Account, including any information pertaining to it (e.g.: contact information, billing information, Account history and Subscriptions, etc.), is strictly personal. You may therefore not sell or charge others for the right to use your Account, or otherwise transfer your Account, nor may you sell, charge others for the right to use, or transfer any Subscriptions other than if and as expressly permitted by this Agreement (including any Subscription Terms or Rules of Use) or as otherwise specifically permitted by Valve.

https://store.steampowered.com/subscriber_agreement/

You're asking Valve to facilitate a practice they ban in their terms. The bookies aren't going to give you good odds on this suggestion ever seeing the light of day.

Originally posted by Eldin:

Originally posted by Snapjak:

If you want to get nitpicky like that then games with local co-op or splitscreen have special licenses that let a guest play.

Otherwise no, you are the sole user and purchaser of your licenses and only family sharing grants others (temporary) access on their own accounts.

Where is that special licence?
Where is it written which games I can play together with someone?

Poor choice of words on Snapjaks end. With local coop you're still the (main) user of your account. No special license needed. According to the terms you should lock the pc, logout or otherwise restrict the other person from having access to your account during pee breaks and such. If you don't, anything the other person does is your own personal responsibility.

[Eldin]

Originally posted by Washell:

You may therefore not sell or charge others for the right to use your Account, or otherwise transfer your Account, nor may you sell, charge others for the right to use, or transfer any Subscriptions other than if and as expressly permitted by this Agreement (including any Subscription Terms or Rules of Use) or as otherwise specifically permitted by Valve.

https://store.steampowered.com/subscriber_agreement/

You're asking Valve to facilitate a practice they ban in their terms. The bookies aren't going to give you good odds on this suggestion ever seeing the light of day.

Key words:
-sell
-charge
-transfer subscription

I'm not charging anyone.
They just use my PC while they're there.

And these reasons doesn't matter for my suggestions.
Reasons for my suggestions are the same reasons we have trade confirmations.

[Washell]

Originally posted by Eldin:

Key words:

All words are key words in legal agreements:
"You may not reveal, share or otherwise allow others to use your password or Account"
That's a blanket statement covering any and all situations you care to think up as a reason to implement your suggestion.

I can also imagine it's legally complicated to forbid actions in legal terms, yet implement real word solutions to protect accounts from a situation where the owner(*) violates said terms. If everything you say is A, but everything you do is B, it's often up to a judge to decide which one is valid.

* Payment details stored on the account are already removed in the case of a hi-jacked account when the mail/password changes.

[Darren]

I think this has been lost or ignore but "this is what Family View is for" is the answer to this. You set an independent second pin that is required to access the store and can be used to restrict games you don't want your guest playing.