Adding Yubikey as a 2FA Option

[Bluntilda]

Hello, I was hoping that steam could implement Yubikey as a 2FA option.

[Mailer]

Look at one out of the many other threads inquiring about Yubikey before yours:
https://steamcommunity.com/discussions/forum/search/?gidforum=882959061469928464&include_deleted=1&q=yubikey

[Nx Machina]

Steam Guard mobile is 2FA.

Secondly yubikey cannot confirm trades

And finally if Gabe Newell's account gets compromised (11 years and counting) then and only then do Valve need to consider an alternative.

[Aachen]

Originally posted by Nx Machina:

.... And finally if Gabe Newell's account gets compromised (11 years and counting) then and only then do Valve need to consider an alternative.

Such a rule seems dodgy—all a compromiser need do in that scenario is avoid using their method on that specific account.

[Nx Machina]

Originally posted by Aachen:

Such a rule seems dodgy—all a compromiser need do in that scenario is avoid using their method on that specific account.

Does that alter his account has not been compromised after he gave away his account name and password but not the Steam Guard mobile code.

Or that accounts can only be phished by the account holder giving away all three.

Or that recovered accounts are not accessible to a phisher unless the account holder once again gives away all three.

The key to the door is the code.

[Bluntilda]

Originally posted by Nx Machina:

Steam Guard mobile is 2FA.

Secondly yubikey cannot confirm trades

And finally if Gabe Newell's account gets compromised (11 years and counting) then and only then do Valve need to consider an alternative.

I'm not sure what a trade is, but I just wanted to sign into my account using my Yubikey. They could always implement Yubikey as a 2FA for logins and not for trades.

[Bluntilda]

Originally posted by Mailer:

Look at one out of the many other threads inquiring about Yubikey before yours:
https://steamcommunity.com/discussions/forum/search/?gidforum=882959061469928464&include_deleted=1&q=yubikey

Thanks for the link. I noticed that everyone seems concerned with trades? I don't know what that is, but I just wanted to use my Yubikey to sign into my account.

[[N]ebsun]

Originally posted by Bluntilda:

Originally posted by Nx Machina:

Steam Guard mobile is 2FA.

Secondly yubikey cannot confirm trades

And finally if Gabe Newell's account gets compromised (11 years and counting) then and only then do Valve need to consider an alternative.

I'm not sure what a trade is, but I just wanted to sign into my account using my Yubikey. They could always implement Yubikey as a 2FA for logins and not for trades.

Would be good to get alternatives for 2FA codes - lots of authentication apps out there that keep your 2FA together, rather than needing a custom app (Steam mobile) or email.