Account security with YubiKey?

[MICHAELA NOOB]

Hi!

I tthink Steam only allows SteamGuard right now.

My concern is that this means I have the second factor of the 2FA login process on the same dedvice that I log in on (e. g. Steam app).

Does anyone know anything about a potential improvement in this sector?
Ideally it would support 2FA via authenticator apps and YubiKey directly.

I can't figure out what Valve's agenda is regarding this matter.

Thanks!

[Nx Machina]

Yubikey cannot verify trades and market transactions.

[✪ HipsterPenguin]

Nx Machina の投稿を引用：

Yubikey cannot verify trades and market transactions.

But it can be used to log in, which would be the point of adding it...

[Nx Machina]

✪ HipsterPenguin の投稿を引用：

But it can be used to log in, which would be the point of adding it...

Steam Mobile Authenticator already does that and can confirm trades and market transactions.

[Nx Machina]

Free points - thank you.

[Kryptic]

Yeah, I'm with you they sure need to get on the bandwagon. I mean EpicGames already has, and so along with so many different companies and they're falling behind and I'm going, to be honest, Steam has some security flaws and really needs a better security.

https://www.yubico.com/works-with-yubikey/catalog/?sort=popular - There are multiple different companies who are invested in this technology for a reason and Steam isn't one of those companies trying to secure everything.

[Gangshalaalluh]

Nx Machina の投稿を引用：

✪ HipsterPenguin の投稿を引用：

But it can be used to log in, which would be the point of adding it...

Steam Mobile Authenticator already does that and can confirm trades and market transactions.

[Nx Machina]

ZinTek の投稿を引用：

Yeah, I'm with you they sure need to get on the bandwagon. I mean EpicGames already has, and so along with so many different companies and they're falling behind and I'm going, to be honest, Steam has some security flaws and really needs a better security.

https://www.yubico.com/works-with-yubikey/catalog/?sort=popular - There are multiple different companies who are invested into this technology for a reason and Steam aren't one of those companies trying to secure everything.

Never had my account compromised and those that do give away their account name, password and the key to the door, the Steam Guard code. User error.

Epic does not do trading, neither do any of the others, GOG etc.

And finally - If you can give Gabe Newell a reason to add another authenticator after he proved the value on the Steam Guard authenticator by giving away his account name and password, excluding the Steam code, and his account remains uncompromised, then he may consider Yubikey.

[Kryptic]

Nx Machina の投稿を引用：

ZinTek の投稿を引用：

Yeah, I'm with you they sure need to get on the bandwagon. I mean EpicGames already has, and so along with so many different companies and they're falling behind and I'm going, to be honest, Steam has some security flaws and really needs a better security.

https://www.yubico.com/works-with-yubikey/catalog/?sort=popular - There are multiple different companies who are invested into this technology for a reason and Steam aren't one of those companies trying to secure everything.

Never had my account compromised and those that do give away their account name, password and the key to the door, the Steam Guard code. User error.

Epic does not trading, neither do any of the others, GOG etc.

And finally - If you can give Gabe Newell as reason to add another authenticator after he prived the value on the Steam Guard authenticator by giving away his acciunt name and password, excluding the Steam code, and his account remains uncompromised, then he may consider Yubikey.

it doesn't matter what people think I want a physical device that no one can touch other than taking it from my cold dead hands and they can't access my accounts I would like to see them try.

[Nx Machina]

Quarry の投稿を引用：

Gain access to Gabe Newell's account and you would have resson to use the emoticon.

[Nx Machina]

ZinTek の投稿を引用：

it doesn't matter what people think I want a physical device that no one can touch other than taking it from my cold dead hands and they can't access my accounts I would like to see them try.

You need to convince Gabe Newell or gain access to his account to prove Steam Guard is flawed and he needs Yubikey.

[Kryptic]

Yeah, I think I'm going to invest into a Yubikey.

[Mr. Smiles]

ZinTek の投稿を引用：

Nx Machina の投稿を引用：

Never had my account compromised and those that do give away their account name, password and the key to the door, the Steam Guard code. User error.

Epic does not trading, neither do any of the others, GOG etc.

And finally - If you can give Gabe Newell as reason to add another authenticator after he prived the value on the Steam Guard authenticator by giving away his acciunt name and password, excluding the Steam code, and his account remains uncompromised, then he may consider Yubikey.

it doesn't matter what people think I want a physical device that no one can touch other than taking it from my cold dead hands and they can't access my accounts I would like to see them try.

You don't own a smartphone? Bro, it's 2021...

[Kryptic]

Mr. Smiles の投稿を引用：

ZinTek の投稿を引用：

it doesn't matter what people think I want a physical device that no one can touch other than taking it from my cold dead hands and they can't access my accounts I would like to see them try.

You don't own a smartphone? Bro, it's 2021...

Dude, I think Epic and Rockstar are doing better with YubiKeys. - Yeah, I've got a Cellphone but I'm really going to be honest here with you buddy I really want a physical device for a second line of defense against aholes on the Internet.

[Mr. Smiles]

It's just that you described a smartphone. My phone has steam guard, has bimetrics and a pin enabled ensuring no one is going to use it but me, and is a physical device that hangs out in my pocket. I dont know why people wand some kind of dedicated device when they already have everything they need but hey, its your money.

[Kryptic]

Mr. Smiles の投稿を引用：

It's just that you described a smartphone. My phone has steam guard, has bimetrics and a pin enabled ensuring no one is going to use it but me, and is a physical device that hangs out in my pocket. I dont know why people wand some kind of dedicated device when they already have everything they need but hey, its your money.

Well, thank you for understanding.