Manual Trade Lock function.

[Mr. Poi]

Preface:
As the prices of virtual assets such as unusuals, skins and others increase, the prospect of stealing items from users becomes more lucrative. This is a potential solution to stopping bad actors from stealing items through Mobile Authenticator file theft, sim swapping, data breaches or other methods of brute force account theft that may not necessarily be of the fault of the user. Users can also take time away from Steam and rest assured that their inventories are safe.

Basic Rundown:
A simple opt-in button to trade lock one's inventory similarly to how a trade ban exists for certain users. One can request the trade lock be removed, but one can only trade after a mandatory 7 day cooldown period where the trade lock remains in place. This ensures the owner of the account has ample time to restore ownership of the account in case of theft, and gives a simple and intuitive method of securing one's assets. For beginning and removing the lock, there should be email notifications sent out to inform the user of the change.

Though the prospect of a directed hacking attempt is unlikely for the average user, additional peace of mind goes a long way in the interest of investor security.

[Cathulhu]

Or maybe people could actually care about account security and stop compromising their accounts.

[AmsterdamHeavy]

Id be ok with the option to lock your inventory, with a 7 day or whatever unlock. As long as only *I* can implement it.

Even better if doing that disables your inventory from being viewed.

Its definitely not "top of the list" or anything, but Id use it because I very rarely trade or market sell anything.

[Mr. Poi]

Originally posted by Cathulhu:

Or maybe people could actually care about account security and stop compromising their accounts.

If you had taken a moment to read this post, you would realize that this is specifically tailored towards combatting issues that cannot be controlled by the end user. No amount of user competence can stop major data leaks or sim swap attacks. It is a merely added bonus that this also happens to address user negligence and compromise as well. Deflecting blame to the end user is not a good criticism given my earlier points.

[Maria]

https://steamcommunity.com/discussions/forum/10/3791506516120632538/?ctp=2#c3791506516121479490

[Mr. Poi]

Originally posted by Maria:

https://steamcommunity.com/discussions/forum/10/3791506516120632538/?ctp=2#c3791506516121479490 :tobdog:

That post is referring to scams and user related error specifically. This suggested function is not to address user incompetence, but happenstance data loss. You cannot fix stupid, that is not what I am trying to do, or trying to suggest. The additional emails sent when the lock is requested to be removed is there as an additional failsafe to inform the user of compromise.

[[?]legit]

Just reset your password without steamguard, that will trigger a 15 days trade ban

[cSg|mc-Hotsauce]

Originally posted by reallegit:

Just reset your password without steamguard, that will trigger a 15 days trade ban :D:

It's 5 days. https://help.steampowered.com/en/faqs/view/451E-96B3-D194-50FC#reset

30 for inactive accounts.

[Supafly]

Originally posted by Mr. Poi:

Originally posted by Cathulhu:

Or maybe people could actually care about account security and stop compromising their accounts.

If you had taken a moment to read this post, you would realize that this is specifically tailored towards combatting issues that cannot be controlled by the end user.

It would only combat issues AFTER a user compromises their account. Thus Cathulhu comment is VALID. Protect your account and none of the extra ***** would be necessary.

[Leonardo Da Pinchi]

I mean, personally I wouldn't mind this simply because I don't trade. But if we did have this, we'd see a huge influx of the wannabe "merchants" of the marketplace flood the forums with complaints like we did when steamguard and trade holds came out.

[Supafly]

Originally posted by Leonardo Da Pinchi:

I mean, personally I wouldn't mind this simply because I don't trade. But if we did have this, we'd see a huge influx of the wannabe "merchants" of the marketplace flood the forums with complaints like we did when steamguard and trade holds came out.

Exactly.. Only way to avoid that would be to make it optional. Once a security feature is optional you can guarantee those that need it the most won't enable it and then be the first to whine that it wasn't enabled by default

[J4MESOX4D]

Originally posted by Mr. Poi:

Originally posted by Cathulhu:

Or maybe people could actually care about account security and stop compromising their accounts.

If you had taken a moment to read this post, you would realize that this is specifically tailored towards combatting issues that cannot be controlled by the end user.

All actions are controlled by the end user i.e giving away their credentials to phishing sites and/or confirming trades which have been intercepted by scammers and then re-popped as a new offer whilst impersonating the intended target of the one they cancelled. The 2FA Guard was supposed to prevent users from getting their inventories phished by offering an independent device to act as a confirmation but scammers found alternative ways to bait victims and the same would happen with any instances where the end-user could trade lock their account.

Even with a multi-step lock confirmed by auth, people will still end up getting scammed somehow and those that are active in trading would never opt in and those that aren't wouldn't be hot targets regardless. Things would be easier if Valve made greater use of 2FA warnings and with extra confirms on top - scams would decline that way and further warnings of API key generation would also benefit more than outright locking an account down.