Enter steam guard code from mobile authenticator

What is the Steam Guard Mobile Authenticator?

Troubleshooting

General Questions

The Steam Guard Mobile Authenticator is a feature of the Steam Mobile App that provides an additional level of security to your Steam account. The authenticator generates a code that you need to enter every time that you log on to your Steam account. The code changes every 30 seconds, can be used only once, and is unguessable.

This system (commonly called two-factor authentication) is stronger than just your username and a password.

Valve also strongly recommends that you add a phone number to your account, which makes recovering your account quite a bit easier, should you lose access.

Your phone does not need to be connected to the Internet for the authenticator to work (however, your phone does need to know the correct time).

Why should I add a phone number to my Steam account?

Adding a phone to your account gives you more options to recover your account in case you forget your password, or if your account is stolen. You can use SMS messaging to reset your password, or transfer your Steam Guard Mobile Authenticator from one phone to another.

How do I add a phone number to my Steam account?

To add a phone number to your account or manage a previously added phone number:

• Log in to Steam (using the application or a web browser) and click on your profile name located in the top right corner.
• Select ‘Account Details’ from the dropdown menu.
• Under ‘Contact Info’, select ‘Add a phone number’. If a phone number has already been added to the account, you will see ‘Manage your phone number’ instead.
• Enter your phone number and select ‘Next’. We will send an SMS message containing your confirmation code — Enter this code to verify that we have the correct information.
• You’re done!

You will now be able to reset your password or transfer your Steam Guard Mobile Authenticator from one phone to another via SMS.

Please note that only one phone number can be associated with a Steam account at a time.

How do I setup a Steam Guard Mobile Authenticator?

How do I log in using the authenticator?

If your account has the authenticator enabled, you will be asked to enter your current code after you’ve entered your user name and password.

• Open the Steam Mobile App. If you are logged in on your phone, go to the Steam Guard menu (the top-most menu selection) to see the current code. (If you aren’t logged in to Steam on your phone, your current code is displayed on the login page).
• Enter the current code when you are asked to. Don’t worry if the code on your phone turns red and changes, you still have a little bit of time left to enter the old code.

You can’t use a code more than once, and you can’t use old codes. So if you just used a code, you should wait for the code to change before using another.

Where is my mobile authenticator code?

The Mobile Steam App provides the current authenticator code for your account.

• Open the Steam Mobile App
• If you’re not logged in, you will see your current code on the login page.
• If you’re logged in, go to the Steam Guard menu, where your current code will be shown.

I don’t have a phone. Can I still use the mobile authenticator?

Not at this time. A supported phone is required.

What is the best way to use two factor authentication?

First, you need to realize that just because you’ve enabled better protection for your account, this does not give you super powers.

• Never share your password or mobile authenticator code with anyone.
• Don’t type your username, password, or authenticator code into a web site that is not run by Valve. Check links carefully. Bad guys often try clever mis-spellings to make links look like they come from Valve. If you’re in doubt, don’t click on them.
• Never tell anyone your password or your authenticator code. Steam Support will never ask for these (nor will any Valve employees).
• Never download and run any program suggested by someone in an email or chat; these are almost certainly scams or malware.
• Never download and run any program that claims to "clean up" or "optimize" or otherwise "fix" Steam (the program could be malware intended to steal your account).

It’s a good idea to print out a set of backup codes that you can use in an emergency.

How do I disable Steam Guard Mobile Authenticator?

You can remove two factor authentication from your account by opening the Steam Mobile App, navigating to the Steam Guard menu item, and selecting "Remove Authenticator". This will bring you to a confirmation window, where you can confirm your choice by selecting "Remove Authenticator" again.

What devices does the Steam Guard Mobile Authenticator work on?

The Steam Guard Mobile Authenticator works on Apple iOS devices running iOS 6.1 or later, Android devices running 2.2 (Froyo) or later, and Windows Phone 8.1 and later.

Why are my items on hold?

Any trades or Market listings created before a Mobile Authenticator is added, or during the first 7 days after it is added, will be held for 15 days. Trades or Market listings created more than 7 days after a Mobile Authenticator is added will not be held by Steam. Adding a Mobile Authenticator will not reduce the length of existing item holds.

Read more about Trading and Market Restrictions, or why you may be unable to trade or use the Market.

Suddenly I’m logged out of the Steam Mobile App and not seeing authenticator codes, what do I do?

Make sure the app is up to date on your phone and restart the app. This is a rare issue, that is commonly solved by restarting the app. Do not delete and reinstall the app. If you delete the mobile app from your phone, you’ll need to reset your authenticator using https://help.steampowered.com.

Help, I lost (or sold) my phone and can’t log in! What do I do?

If possible, you should contact your wireless service provider and get a replacement phone with the same phone number. Steam will be able to send SMS messages to your replacement phone, and you will be able to recover your account as described below.

If you no longer have access to your phone and don’t have your recovery code, you’ll need the assistance of Steam Support. Use the "Help me with my issue" button at the top right of this page to get help removing your authenticator. If you don’t have access to the email address that is currently associated with your Steam Account please provide proof of account ownership within your ticket.

My authenticator codes aren’t working!

If you are unable to log in using the authenticator codes:

• Check the time on your phone and make sure it is accurate. The authenticator codes are generated using the phone’s time, and if the time is off, the codes will be incorrect.
• If you have more than one account with an authenticator, make sure you are entering codes for the correct account.

You can remove the authenticator from the account; see the section below on authenticator recovery.

Can I transfer my authenticator to my new phone?

To transfer your authenticator to a new phone, you’ll need access to the phone number associated with your account (so we can send you a text message to confirm it’s you).

From the Steam Mobile app on your new device, try to log into your account. When the app asks for your authenticator code, select "Please help, I no longer have access to my Mobile Authenticator codes." Follow the steps the app provides and you can either transfer your authenticator to the new device or remove it from the previous device.

After transferring the authenticator, any new trades or market listings will be held for a couple of days to protect your items in case your authenticator is ever transferred by a malicious person. See our Trade Holds FAQ for more information about trade holds.

I’m getting a new phone soon. What do I need to do?

If you’re keeping your phone number, then you don’t need to do anything in advance to prepare. Once you get your new phone, you can transfer your authenticator to the new phone using the steps in the answer for the previous question above.

If you have two factor authentication enabled, and you will also lose access to your old phone number, then you should:

• Disable the authenticator (go to the Steam Guard menu and select "Remove Authenticator"). Note that doing this will prevent you from trading or using the Community Market for 15 days. It is recommended that you transfer the authenticator instead whenever possible.
• Log out of your account (go to the Log Out menu on iOS, or go to Settings / Log Out on the Android app).

Before you sell or give your phone away, we recommend doing a factory reset on it and removing personal information.

How do I remove the phone number from my account?

Log into the store in a browser, then:

• Go to your Account details (viewable under your profile name, near the top of the web page).
• Click on Manage your phone.
• Click on Remove phone.
• You can remove the phone by typing in the current code from your Authenticator, or by sending your phone an SMS code. Choose one of these options and follow the instructions.

Is there a way to get backup codes in case I lose my phone?

Yes, you can generate backup codes to use in an emergency. It’s easy:

• Log in to the Steam store
• Go to the account drop-down at the top right of the page and select Account Details
• Select the Manage Steam Guard item on the right.
• Select the option to Get Backup Steam Guard Codes.
• You’ll have to enter the SMS code that is sent to your phone number.
• You’ll see a page with a number of codes that you can use instead of the one generated by your phone. Steam will also send email to your account every time new codes are generated, and every time one of these codes is used.

It’s a good idea to print these codes instead of saving them on your computer. Don’t take a screen shot of them.

I didn’t save my recovery code, where can I find it?

Log in to the Steam Mobile App, from the main menu select Steam Guard, and on the Steam Guard page you’ll see a menu option for "My Recovery Code".For security purposes, if you’re unable to log into the Steam Mobile App, you will not be able to view your recovery code.

I’m not receiving SMS messages!

If you are unable to receive SMS messages from Steam, check with your wireless provider that your wireless account is allowed to receive them. Our text messages can come from a 6 digit phone number, please ensure that your provider supports this. Steam will also stop sending SMS messages if too many have been sent to you, so waiting a few minutes to an hour may allow messages to come through again. You should also check to make sure that your phone’s inbox is not full.

Why isn’t my phone number working?

First, make sure you are entering your phone in international format (with ‘+’ and your country code first).

Make sure that your country code is correct (Steam tries to guess where you are in the world, but you can also select your location from the menu below your phone number).

Valve does not allow certain phone numbers, such as VOIP numbers and numbers that cannot receive text messages. If your phone number is being rejected and you think that the rejection is in error, please contact Support by clicking on the "Help me with my issue" button.

Why is my number being blocked because it’s considered VOIP?

We are unable to accept new VOIP phone numbers on Steam due to them not meeting our security requirements. If your phone number is blocked because it’s considered VOIP you will need to find a mobile or prepaid phone number to use on Steam. Select carriers use VOIP technology in their cellular plans and we are unable to support these. Our system will notify you when you enter your phone number if we consider it to be a VOIP number.

Can I use multiple phones to authenticate my Steam account?

No, only one authenticator can be active on an account at any one time.

Can I share my phone number between multiple accounts?

Yes. You may use the same phone number on multiple accounts. You may enable Steam Guard Mobile Authenticator on multiple accounts on the same phone by logging in to each account within the app and following the procedure to enable the authenticator on each account. The app will provide codes for all accounts regardless of which account is currently logged in to the app. Accounts with the same phone number may be treated as the same identity with respect to the Steam Subscriber Agreement, policies, or restrictions.

Do the SMS messages you send cost me anything?

Standard messaging charges may apply; check your wireless phone plan to confirm.

Why am I not prompted for a code when I save my login credentials in Steam?

To make logging into your account faster, we do not require a code if you have saved your Steam client credentials. You may choose not to save your credentials and require a code on every login. You can change this in Steam’s client settings under the account tab anytime by checking the box at the bottom that says, ‘Don’t save account credentials on this computer’.

Do VAC and Game bans apply to all accounts on a phone number?

If an account that has a phone number registered to it receives a VAC or Game ban, all other accounts that use the same phone number will also receive a ban. If the other accounts do not own the game they will still receive the ban and be unable to purchase the title on that account.

This feature is not enabled for all games and will be used at the discretion of the developer.

Need Authentication code to log into Steam App on phone for Authentication code
Can someone help me? My phone restarted on me, then the restart logged me out of Steam on my phone’s Mobile app, the same mobile app that has my Steam Guard Authentication code that I need to log in to anything steam related.

Here’s the kicker, I can’t log in until I get the phone app the code that is on the phone app that I can’t log back into. I have the password, I have the user name, I have proof that I’m the user, BUT I CAN’T PROVIDE A CODE!

Before all this happened, I was trying to find the Recovery Code that it gave me because the phone went into energy saving and shut off the screen, but I couldn’t get it back. Then I looked everywhere and I’ve had to relog into the forums and I find out that I need the app’s code from here on out. So that means I’m screwd if I get logged out.

But wait, there’s more, now at this point the app stops giving me any codes be it the one time use one or the Backup Recovery code which I’ve been trying to find. Then all of a sudden the app crashed, and that in turn caused my phone to reboot, mind you it could be the phone was updating the OS, but when it rebooted I was logged out of Steam on the phone and now when I try to get it to log in. I am asked for a code on top of the password and the username, and since I can’t give it since I need to log in to get it in the first place.

So I’m locked out and I can’t get the Recovery code or disable steam Guard without either the code for ether one time or recovery. And I can’t turn off my PC for fear that I will be logged out and won’t be able to log back in even for my support tickets.

And since I’m not receiving e-mails or even SMS messages on my phone for the code, and I can’t find a way to force the system to do it, I’m kind of wondering if someone can freaking help me with this. Because right now I can’t risk shutting down my PC or logging out via the web page. Please help, SOMEONE! ANYONE!

This guide will help you understand the proper way to use your Steam Authenticator. And guide you through worst case scenarios you need to be aware of, and how to mitigate them.

(yes yes its in the Dota2 section but some of Jimos general guides were there so I figured it was ok and I didn’t know how to create a guide for "Steam")

75,763	уникальных посетителей
410	добавили в избранное

Recently Steam has added a delay in trades between users if one user doesn’t have the Steam Authenticator enabled. Maybe you don’t have a smartphone. Maybe you’re cursed with a Windows Phone or one of 5 people left with a Blackberry. What can you do?

Please note that using WinAuth is less secure than having a separate device for trade confirmations.

Not getting hijacked is the best defense. And not downloading garbage from the Internet is the best way to ensure your account is safe.

So you’ve decided to dive in and get a Steam Authenticator. This is a good thing. Doing so will greatly increase the security on your Steam account.

If you’re new, the Steam Authenticator works like SteamGuard but doesn’t require email. No more waiting for your SPAM filters to catch up. No more lost email codes. Sounds great doesn’t it?

However before we proceed you will need the following

• An Apple or Android device
• A real phone # that can receive SMS messages. This is now mandatory so you’ll need to get something that does SMS.
• A piece of paper and a pen. Yes you need this.

The first step is obviously to go to your phone’s app store and download the Steam app. There are Android and iOS versions of the Steam app. Ensure you’re getting it from the Google or Apple store! Fake "Steam App" can be used to steal your credentials! So only download from the authorized stores.

You’ll need to log into the app once using the old email SteamGuard code. This gets your bootstrapped into the app.

Here’s where the fun begins. In the app find the SteamGuard section. Note my screenshots are from iOS. Android might be slightly different but the overall flow should be similar

Select "Get Steam Guard Codes from my Phone"

This changed in recent revisions, but you can now ONLY use SMS to authorize the app.

Type in your phone number and tap "Add Phone"

Type in the code you got via SMS and tap Submit

Now get that pen and paper ready, and skip to the "WRITE DOWN YOUR R-CODE" Section.

When you authorize the Steam Authenticator you will receive a screen that has a code that looks like

This will stay on the screen for 30 seconds

Remember that paper and pen I told you about before.

WRITE THIS CODE DOWN NOW

Put this code in a safe place! It is one safety net you will have if you somehow screw up your Steam Authenticator app.

WRITE THIS CODE DOWN NOW

Especially if you decided to not to register your phone! The R-code is the ONLY way to remove the authenticator if you don’t have an SMS number. So again:

WRITE THIS CODE DOWN NOW

Rarely the app won’t show or generate the R-code as part of the registration process. The app will generate the codes but you don’t have an R-code in case of emergency. This is not good.

The app now allows you to view the Recover Code after you’ve registered the app. Update your app if you don’t see the following.

1) Go into the SteamGuard section

2) Tap "My Recovery Code"

3) You will now see the recovery code screen

Remember what was stated previously

WRITE THIS DOWN!

DO NOT STORE ON YOUR PHONE

Did you write down your R-code? That’s great.

Is it on your phone? Maybe you took a screen shot on your phone of the R-code. Or wrote it on a note on your phone.

Because when are you going to need your R-code?

When you can’t use your authenticator. Probably because you lost your phone, or formatted it or whatever. Guess what?

Now the only way to recover your phone authenticator is to find a code. on the phone you no longer have.

Put your R-code separate from your phone!

This is your second line of defense

If you ever log out of the Steam Authenticator app, in order to log in again you’ll need a Steam Guard code. A code you can’t get because. you logged out of the app! WHAT TO DO?

Easy. You can generate a list of one time use Steam Guard codes.

Note this step is VERY VERY important, if you ever lose your phone number then you have very few ways of removing the number except via SteamGuard codes. Having backup SteamGuard codes ensures you can use them to remove your old phone number and register a new one.

On a computer (not your phone) go to your Account Settings. And click "Manage Steam Guard"

Then click "Get Backup Codes"

Input your SteamGuard code from your authenticator

Save these codes off to a safe place. You can use them in desperation if you need to log into Steam but don’t have your authenticator for some reason.

So you opted out of using the SMS option when you created your authenticator originally. But now you want to add a phone number to your account for increased security and ease of recovery later.

Its important that you have several Plan B for when things might go wrong with your authenticator. An ounce of prevention today, will prevent 8 weeks of torment from Support in the future. Well worth it in my opinion.

Go to you Account Settings. In the Contact Info section click "Add A Phone Number"

Input your SteamGuard code from your authenticator

Enter your phone number here. Ensure you change the country code to your appropriate country. Note SMS charges will apply to you

Input the 5 digit numeric code you get through SMS

Woo Hoo! Your phone is now authenticated

You now have an additional recovery option when anything happens to your authenticator.

So now you’ve done it. You lost your authenticator. Whatever the reason. You formatted your phone. You lost it. Your dog ate it. You destroyed it while doing your victory dance when you got a CSGO Karmabit Knife Camo. Whatever it is. You’re now screwed

If you followed all my tips above then don’t fear! You have an escape hatch with a parachute waiting for you.

This is where the SMS option is CRITICAL. It is the most reliable way to recover your account. Alternatively you can use your R-code as well.

Click "I deleted or Lost my Steam Guard Mobile Authenticator"

First type in your account name

Then it will send a recovery code to either your email or via SMS.

Type in the code that yoru phone gets. It will look like a Steam Guard code

Then goto Remove Authenticator

All you need to do here is type in your Steam password.

Presto you’re saved! See I told you that SMS option was the way to go!! Gold star for you!

Type in the recover code. Again it looks like a Steam Guard code

Click Remove Authenticator

Ok now you have 2 choices.

1) Use the R-Code which YOU WROTE DOWN BEFORE RIGHT? YOU DID DIDN’T YOU? So you just need to put in your Rcode

2) Or you can have Steam send you another Steam Guard code via SMS. See you can’t get away from that SMS option.

Then input your Steam password

Now you can remove your SteamGuard authenticator

The authenticator user your phone’s time in order to generate the codes. If the time is off on your phone, then the app will generate the wrong code and it wont work.

Check that your phone time is properly synced, then try a new code.

So its important to understand what kinds of things the Mobile Authenticator and the SMS phone option give you. Its not 100%. But it does add layers of protection for you

Note this is primarily as a RECOVERY tool. It will allow you to RECOVER your account if

• You lose/delete/format your Mobile Authenticator
• A hijacker changes your password

That’s pretty much it. It will not protect your Inventory. Because your attacker can change your email address in the Steam client to their own. Then trade your items away. So while you can get your account back, it doesn’t afford any protection for your inventory.

Still its important to have this as a backup recovery method in case you lose your Mobile Authenticator for some reason. Don’t ignore this!

So you’ve done all the right things. You now have two-factor authentication on Steam. You’ve enabled it on your email account too. You have unique passwords on Steam. You’re totally safe now right?

You must always be vigilant. You are your own worst enemy. People are hijacked because attackers trick them into giving them the keys to their accounts. No amount of security in the world is going to help if you give your ‘trader’ access to your PC.

Always be vigilant.

Beware of all external links. Beware of downloads. Beware of unknown sources.

Security is about layers. The more layers there are the more inconvenient it is for attackers. But the reality is YOU are the weakest layer.

Don’t let hijackers exploit you. Always be wary of links. Never rush things. Assume EVERYTHING is out to get you. Basically assume you’re in Australia. Because everything there is Nature’s way of saying "GTFO or die!". Everything is out to get you. Act accordingly.

Feeling left out in the cold because you don’t have a smartphone? Don’t worry there’s a solution for you!

WinAuth is an Open Source two-factor keyring. It supports the two-factor authentication for many services. And recently has begun to support SteamGuard.

If you don’t have a smartphone then you can download WinAuth and register your account to have a desktop application that gives you the SteamGuard codes

The whole point of two factor authentication is to separate the authenticator from the authentication. Putting the authenticator on your computer means that a hijacker has access to your computer AND THE AUTHENTICATOR!

This is a big problem since they can steal the SteamGuard codes from you! WinAuth has a password option. ENABLE THIS OPTION.

You might be confused as to whether your registered phone # needs to be on the same device as the authenticator.

All you really need is

* An iOS or Android device. This can be a smartphone, or it could be a totally wifi tablet or other device. This just runs the app.

* A phone number thta can receive SMS messages. You need this to get the authorization for the app but that’s it. It can be a flip phone from the 90s you grandpa has.

Thus you can have various combinations of devices such as:

1) iPhone/GalaxyS for SMS + iPhone/GalaxyS for app. Where the app and SMS are on the same device. This is the typical scenario.
2) wifi iPad/Galaxy Note/some garbage tablet you got at a Christmas Secret Santa for the app + flip phone for SMS
3) iPhone for the app + Samsung Galaxy S4 for the SMS (for the ultra rich and ultra paranoid!)

The Mobile Authenticator now requires an SMS phone number to register the app. Maybe you don’t have one.

You might be tempted to use an online service like Google Voice to get an SMS number.

While this does work, as I have tested a Google Voice number with another account, I would advise EXTREME caution when doing so.

As you can see using an online service like Google Voice for your SMS may leave you vulnerable to hijacking despite having 2FA and an SMS phone number.

In other words BE VERY VERY CAREFUL if you use this route. You need to be super paranoid and cautious about stuff. Because a hijacker can attack you and steal your credentials and your SMS which is VERY bad

In the USA you can use services like Google Voice.

Outside of the USA you’ll have to see if there are any similar services available

DO NOT USE ANY FREE SMS SERVICES. Hijacks have occurred because a person used a free SMS service and got their account hijacked. Or worse, their accounts were VAC banned because the 150th person that used that phone # cheated.

Lets say you change your phone number. Maybe you lost your phone. Maybe you’re on a new contract. So you need to change it.

Then select one of two options

This basically sends an SMS message to your existing phone. Then you can remove the phone # from Steam. When you get your new phone number, simply add it back using the "Adding A Phone Number To Your Account" section above

Of course this somewhat assumes you’re thinking ahead.

2) Use SteamGuard codes

In this scenario you use a SteamGuard code in order to remove the phone number.

You may
* Use a SteamGuard code from your authenticator
* Use a SteamGuard code from your Backup SteamGuard codes

Remember back when I told you to generate a set of Backup SteamGuard codes?

Did you ignore that?

Yeah don’t ignore that!

Go back and generate those codes right now!!

1) To have the Mobile Authenticator on
2) Have the Mobile Authenticator on for 7 days straight

If any of the above isn’t correct you will still be subject to 3 day trade holds.

In your browser click on your name then select Account Details

If your "Account Security" section looks like this

Note the yellow shield. That’s wrong. Go back and activate the Authenticator properly

It should look like this

Note the green shield. That means you have the Steam Mobile Authenticator active on your account

After you activate the Steam Mobile Authenticator you must wait a 7 day cooldown before you are exempt from trade holds

If you ever remove the authenticator or change to the email authentication and go back to the mobile authenticator, that re-triggers the 7 day cooldown. You’ll have to wait another 7 days after that.