Account security with YubiKey?

[MICHAELA NOOB]

Hi!

I tthink Steam only allows SteamGuard right now.

My concern is that this means I have the second factor of the 2FA login process on the same dedvice that I log in on (e. g. Steam app).

Does anyone know anything about a potential improvement in this sector?
Ideally it would support 2FA via authenticator apps and YubiKey directly.

I can't figure out what Valve's agenda is regarding this matter.

Thanks!

[Kryptic]

So, what if Steam doesn't secure their mistakes?! well, somebody else will rectify those mistakes and make it ten times better and make a hell of a lot more money. - good day

[Nx Machina]

Publicado originalmente por ZinTek:

So, what if Steam doesn't secure their mistakes?! well, somebody else will rectify those mistakes and make it ten times better and make a hell of a lot more money. - good day

March 5th 2011.

https://www.escapistmagazine.com/gabe-newell-gives-away-personal-steam-password/

Gabe Newell's details are on the link - now all you need is the Steam Guard code.

Income is not an issue for Valve with Steam and Yubikey is not related to income after all most people who have Epic accounts are there for free games not to buy games.

[Kryptic]

Publicado originalmente por Nx Machina:

Publicado originalmente por ZinTek:

So, what if Steam doesn't secure their mistakes?! well, somebody else will rectify those mistakes and make it ten times better and make a hell of a lot more money. - good day

March 5th 2011.

https://www.escapistmagazine.com/gabe-newell-gives-away-personal-steam-password/

Gabe Newell's details are on the link - now all you need is the Steam Guard code.

Income is not an issue for Valve with Steam and Yubikey is not related to income after all most people who have Epic accounts are there for free games not to buy games.

Dude, to each to their own. I have my opinion you've got yours. thank god I am not a Steam Fanboy wow.

[brollen]

Good

No one will care about that, man.

[Nx Machina]

Publicado originalmente por ZinTek:

Dude, two each to their own. I have my opinion you've got yours. thank god I am not a Steam Fanboy wow.

Does pointing out facts make anyone a fan boy? No it does not

Yubikey cannot confirm trades and market transactions, and neither can other authenticators. Steam Guard does as well as secure your account.

Always remember Valve time is limitless

[my new friend]

Publicado originalmente por MICHAELA NOOB:

Does anyone know anything about a potential improvement in this sector?
Ideally it would support 2FA via authenticator apps and YubiKey directly.

I can't figure out what Valve's agenda is regarding this matter.

Still in the works.

What's next?

...the original Steam Mobile app will see significant upgrades focused on account security. Our plans include better Steam Guard options to help securely log into your Steam account, such as QR codes and one-touch login, and improved app navigation.

https://steamcommunity.com/games/593110/announcements/detail/1621770561065348220

[Kryptic]

Well, I can easily say this if you get the Yubikey and use it to secure your email accounts then you should be fine. even if malicious individuals do get ahold of your account information and try something? well, that right there should act as a line of defense hopefully.

Despite what the Steam community might think it doesn't matter what you all think because everyone and their mother seems to have an opinion these days but if people want to invest into this technology and secure their accounts well they're going to if you all like it or not.

[Nx Machina]

Publicado originalmente por ZinTek:

Well, I can easily say this if you get the Yubikey and use it to secure your email accounts then you should be fine. even if malicious individuals do get ahold of your account information and try something? well, that right there should act as a line of defense hopefully.

Despite what the Steam community might think it doesn't matter what you all think because everyone and their mother seems to have an opinion these days but if people want to invest into this technology and secure their accounts well they're going to if you all like it or not.

The thread is about Yubikey and Steam, not email accounts. You are free to buy a Yubikey, Valve are free to not implement it on the Steam platform and it has nothing to do with like or dislike.

[Kryptic]

Publicado originalmente por Nx Machina:

Publicado originalmente por ZinTek:

Well, I can easily say this if you get the Yubikey and use it to secure your email accounts then you should be fine. even if malicious individuals do get ahold of your account information and try something? well, that right there should act as a line of defense hopefully.

Despite what the Steam community might think it doesn't matter what you all think because everyone and their mother seems to have an opinion these days but if people want to invest into this technology and secure their accounts well they're going to if you all like it or not.

The thread is about Yubikey and Steam, not email accounts. You are free to buy a Yubikey, Valve are free to not implement it on the Steam platform and it has nothing to do with like or dislike.

Well, sir thank you for understanding. that truly means a lot and now we can finally agree on something. - I still have my opinion but nobody will change that because as a consumer I want my accounts safe.

[Nx Machina]

Publicado originalmente por ZinTek:

Well, sir thank you for understanding. that truly means a lot and now we can finally agree on something. - I still have my opinion but nobody will change that because as a consumer I want my accounts safe.

Your Steam account is secure with Steam Guard.

Trades, market transactions via Steam Guard only.

Valve not needing to implement Yubikey.

Gabe Newell's account, not compromised.

You wanting a Yubikey to secure your email, not relevant to the thread.

[Kryptic]

The YubiKey is a hardware authentication device manufactured by Yubico to protect access to computers, networks, and online services that supports one-time passwords, public-key cryptography, and authentication, and the Universal 2nd Factor and FIDO2 protocols developed by the FIDO Alliance.

[Kryptic]

My point exactly if you secure your email accounts then they're going to have a hard time getting into your Steam account hopefully, I mean what is so hard to comprehend there? my advice homie is to get a Yubikey and secure your email account asap.

[Michael Westen]

Publicado originalmente por SatanicPanic:

My point exactly if you secure your email accounts then they're going to have a hard time getting into your Steam account hopefully, I mean what is so hard to comprehend there? my advice homie is to get a Yubikey and secure your email account asap.

If they can hack the phones of presidents of country's and CEO's of Fortune 500 companies, you think it will be hard to hack your phone

"77,000 Steam accounts are hacked and raided every month"
https://www.bitdefender.com/blog/hotforsecurity/77000-steam-accounts-are-hacked-and-raided-every-month

With YubiKey, it makes it just impossible to login on any new device without the YubiKey, any digital account can be hacked, SteamGuard could have a 0day vulnerability.
YubiKey just makes it nearly impossible to login on a new device without the key, unless you are the NSA, maybe.

YubiKey is just a hardware digital key and lock for any account that supports it, and yeah my PC and mail is already secured with a Yubikey, as Yubikey makes login's so easy, it would be silly not to implement it, for people that want to spend the money for the extra security or already have one, like me.

YubiKey just makes (almost) NSA level security very simple for any account!
https://www.youtube.com/watch?v=fzUVrz0ixn8

[Nx Machina]

Publicado originalmente por Michael Westen:

Publicado originalmente por SatanicPanic:

My point exactly if you secure your email accounts then they're going to have a hard time getting into your Steam account hopefully, I mean what is so hard to comprehend there? my advice homie is to get a Yubikey and secure your email account asap.

If they can hack the phones of presidents of country's and CEO's of Fortune 500 companies, you think it will be hard to hack your phone

"77,000 Steam accounts are hacked and raided every month"
https://www.bitdefender.com/blog/hotforsecurity/77000-steam-accounts-are-hacked-and-raided-every-month

With YubiKey, it makes it just impossible to login on any new device without the YubiKey, any digital account can be hacked, SteamGuard could have a 0day vulnerability.
YubiKey just makes it nearly impossible to login on a new device without the key, unless you are the NSA, maybe.

YubiKey is just a hardware digital key and lock for any account that supports it, and yeah my PC and mail is already secured with a Yubikey, as Yubikey makes login's so easy, it would be silly not to implement it, for people that want to spend the money for the extra security or already have one, like me.

YubiKey just makes (almost) NSA level security very simple for any account!
https://www.youtube.com/watch?v=fzUVrz0ixn8

So you linked an article from 2015 to prove what exactly?

Been here 17+ years (18 years on 18 Nov 2022) and never lost access to my account.

How are Steam accounts accessed? via "phishing" due to the account holder "giving away" their account name, their password and the key to the door, the Steam Guard Mobile code.

All you need to do is guess my account name, guess my password, have access to my mobile and the Steam Guard Mobile code contained on it which changes every 30 seconds

The ship has sailed as Valve updated the app plus Yubikey cannot do Steam Trades.

[Michael Westen]

Publicado originalmente por Nx Machina:

So you linked an article from 2015 to prove what exactly?

And it is still happening in 2022
https://tech.hindustantimes.com/gaming/news/alert-epic-games-steam-hacked-by-bloodystealer-trojan-don-t-do-this-71632808419342.html

Been here 17+ years (18 years on 18 Nov 2022) and never lost access to my account.

Yeah, sure, I never had a car accident in my life, so I properly don't need a car ensures?
Because a sample of one is really representative of the chance you will get in a car accident or get hacked, in the future. o_0

The ship has sailed as Valve updated the app plus Yubikey cannot do Steam Trades.

And yet, accounts still get hacked, and why could Yubikey's not be used for trades, I actually think it would be perfect for it, it is simple and fast, do you even know how it works?

I really don't get why people here so are against YubiKey's, if you don't want them, then you just don't buy them, simple as that.
And there are many different keys: https://www.techradar.com/best/best-security-key

But almost every big online player is part of the Fido Alliance (Fast IDentity Online), even the much smaller Epic, and for a good reason, because it's simple and almost unhackable.
https://fidoalliance.org/

And Fido/Yubikey's is also not that hard to implement, there are plenty of SDK's for it.

So why are you and many others here, so against more security, please by all means stay less secure if you don't want to pay the $/€50 for the two keys you need for it, that you also can use for securing almost all your other online accounts.