Allow standard 2FA TOTP option to be used to login to Steam account

[zacy5000]

It would be great if you could set up TOTP to be used to login to Steam instead of forcing the Steam app to be used. This means that generic 2FA TOTP apps can be used instead such as 1Password, Bitwarden (who currently have a hacky way of using the current 2FA implementation), or Aegis.

People will still need the Steam app to confirm trades, and selling items which I think is fine but to login, it would be great to have the option to use TOTP. This also means if the Steam app is incompatible with someone's phone, it does not matter.

[[N]ebsun]

Good idea. Without the app, we have to use email for the code - would be good if the login at least could have 2fa codes generated by something else, rather than just email or steam app.

[cannibal_lolocaust]

I would also like this. I happen to dislike being emailed 1-time codes & would prefer to just add a Steam entry to the TOTP app I use for everything else. At the very least, it would be nice to have the option to get a TOTP seed (presumably via QR code) instead of always being emailed/texted a code. That way people who are happy with the current system or just don't care either way wouldn't have to do anything, but I could switch to using my TOTP app.

[The Hannibal]

Hi zacy5000, I don't think it will change anything by now, but thanks for opening this thread.
Hope dies last

[Nx Machina]

Been here 17+ years, never lost control of my account before Steam Guard Mobile was introduced nor after it was introduced.

Secondly if Valve had wanted to use other methods they would have chosen to do so.

[Lordfirespeed]

Ursprünglich geschrieben von Nx Machina:

Been here 17+ years, never lost control of my account before Steam Guard Mobile was introduced nor after it was introduced.

Secondly if Valve had wanted to use other methods they would have chosen to do so.

It's a convenience thing. I, for one, would prefer to keep all my login TOTPs in one app.

Valve is already using standard TOTP under the hood. They've basically slapped their own cosmetics onto a standard library and used 'Steam needs to display items being traded before 2FA confirmation is provided' as justification.

Except the number of people using the 'trade' feature is a significant minority, compared to the number of users that just want to *login*... I know, right, what a crazy statistic! Who'd have thought it?

[Satoru]

Ursprünglich geschrieben von Lordfirespeed:

Ursprünglich geschrieben von Nx Machina:

Been here 17+ years, never lost control of my account before Steam Guard Mobile was introduced nor after it was introduced.

Secondly if Valve had wanted to use other methods they would have chosen to do so.

It's a convenience thing. I, for one, would prefer to keep all my login TOTPs in one app.

Valve is already using standard TOTP under the hood. They've basically slapped their own cosmetics onto a standard library and used 'Steam needs to display items being traded before 2FA confirmation is provided' as justification.

Except the number of people using the 'trade' feature is a significant minority, compared to the number of users that just want to *login*... I know, right, what a crazy statistic! Who'd have thought it?

In order to use QR code logins and push notifications, which are far more convenient for most users, you need a custom appliation

[Nx Machina]

Ursprünglich geschrieben von Lordfirespeed:

It's a convenience thing. I, for one, would prefer to keep all my login TOTPs in one app.

Valve is already using standard TOTP under the hood. They've basically slapped their own cosmetics onto a standard library and used 'Steam needs to display items being traded before 2FA confirmation is provided' as justification.

Except the number of people using the 'trade' feature is a significant minority, compared to the number of users that just want to *login*... I know, right, what a crazy statistic! Who'd have thought it?

And yet people are logging in using the Steam app and trading is optional but a requirement if you want to trade on Steam. Secondly no other app does that, therefore Valve has both options covered and includes push notifications and QR codes, and just like other businesses Valve gets to choose their own security app, in the same way my bank has it's own app, Blizzard has it's own app, Square Enix has it's own app, SWTOR has it's own app etc, and none have to cater to user requirements.

[Dieter]

This thread was quite old before the recent post, so we're locking it to prevent confusion.