TOTP or PASSKEY

[MUZZY]

Please give us possibility to have 2FA without telephone. I really not get why you believe that mobile binding is secure enough . It is in reality create much more problems than benefits.
1) Whole your security binded on mobile operator 3rd party . Nobody do security audit of them .
2) If you abroad then whole your security depend from chain of unknown parties including 3rd party roaming mobile operators which nobody do audit .

So i suggest to give us possibility to have authentication which do not depend from unknown 3rd parties . Or TOTP or Passkey.

[HikariLight]

Steam's 2FA is in-house.
There is no third party involved.

[MUZZY]

For this in-house 2FA you must use SMS , it is not possible to configure without telephone.

[eram]

Messaggio originale di MUZZY:

For this in-house 2FA you must use SMS , it is not possible to configure without telephone.

correct, you can use steam guard email if you dont want to use a phone.

[MUZZY]

Messaggio originale di eram:

correct, you can use steam guard email if you dont want to use a phone.

It is still sometimes ask to send SMS in moment if i buy something.

[eram]

Messaggio originale di MUZZY:

Messaggio originale di eram:

correct, you can use steam guard email if you dont want to use a phone.

It is still sometimes ask to send SMS in moment if i buy something.

not if you use steam guard email it doesnt.

[MUZZY]

Messaggio originale di eram:

Messaggio originale di MUZZY:

It is still sometimes ask to send SMS in moment if i buy something.

not if you use steam guard email it doesnt.

Well. if you using email then exist market limitations related to trades. this is not important as i almost never use it. But in a moment when i use it it is extremely annoying due to weeks lag.

Normally i used QR on galaxy which dont have sim card. Some days ago it was situation when i wanted to buy somehting at steam and it suddenly asked SMS to telephone.
I not got SMS till now it is already more than week passed. So all sms auth compltely depend from 3rd party.
beside this what is wrong just to have normal industry standard solution like TOTP or Passkey ?

[ReBoot]

Messaggio originale di MUZZY:

beside this what is wrong just to have normal industry standard solution like TOTP or Passkey ?

For starters, neither TOTP nor Passkey cover market/trading transactions meaning getting rid of the Steam-specific solution is impossible. Supporting TOTP/Passkey would henceforth mean supporting 2 different solutions which is a bad idea for several reasons, be it customer confusion ("then there's things I can only do on app X and only things I can do on app Y, this is confusing") or development/QA costs.

[MUZZY]

Messaggio originale di ReBoot:

Messaggio originale di MUZZY:

beside this what is wrong just to have normal industry standard solution like TOTP or Passkey ?

For starters, neither TOTP nor Passkey cover market/trading transactions meaning getting rid of the Steam-specific solution is impossible. Supporting TOTP/Passkey would henceforth mean supporting 2 different solutions which is a bad idea for several reasons, be it customer confusion ("then there's things I can only do on app X and only things I can do on app Y, this is confusing") or development/QA costs.

Did i told somewhere about getting rid of ? Just it will be nice to have industry standard alternative. As i know development TOTP and PK cost relatively nothing if to compare with another. Argument about customer confusion also look extremely weak.

[eram]

Messaggio originale di MUZZY:

Messaggio originale di ReBoot:

For starters, neither TOTP nor Passkey cover market/trading transactions meaning getting rid of the Steam-specific solution is impossible. Supporting TOTP/Passkey would henceforth mean supporting 2 different solutions which is a bad idea for several reasons, be it customer confusion ("then there's things I can only do on app X and only things I can do on app Y, this is confusing") or development/QA costs.

Did i told somewhere about getting rid of ? Just it will be nice to have industry standard alternative. As i know development TOTP and PK cost relatively nothing if to compare with another. Argument about customer confusion also look extremely weak.

its been asked for years just search and see, for years and for now at least they dont want to use anything other than their own

[Deadoon]

Messaggio originale di MUZZY:

Messaggio originale di ReBoot:

For starters, neither TOTP nor Passkey cover market/trading transactions meaning getting rid of the Steam-specific solution is impossible. Supporting TOTP/Passkey would henceforth mean supporting 2 different solutions which is a bad idea for several reasons, be it customer confusion ("then there's things I can only do on app X and only things I can do on app Y, this is confusing") or development/QA costs.

Did i told somewhere about getting rid of ? Just it will be nice to have industry standard alternative. As i know development TOTP and PK cost relatively nothing if to compare with another. Argument about customer confusion also look extremely weak.

Steam's 2fa method also includes authentication of trades and market transactions in the same app.

Other systems do not have the ability to implements such mechanisms, thus would be lower functionality than steam's current method, resulting in a worsened user experience, and potential confusion regarding capabilities if both work side by side.

People are idiots. The moment you have choices that are worse than others they will complain about those worse choices being worse, or be confused about how they are worse, even if they were warned about it beforehand.

[AnatoleH1]

I'd love to see Steam Guard expanded to include either Passkey support, authentication codes (generated on-the-fly and authenticator app-agnostic), or SMS verification . Email and in-house app codes are a pain and vastly outdated.

[MUZZY]

Messaggio originale di AnatoleH1:

I'd love to see Steam Guard expanded to include either Passkey support, authentication codes (generated on-the-fly and authenticator app-agnostic), or SMS verification . Email and in-house app codes are a pain and vastly outdated.

Careful. :) Certain individuals will show up any minute now and start saying this isn’t necessary and praising the current solution from Steam