this post was submitted on 19 May 2025
292 points (99.0% liked)

Games

38929 readers
923 users here now

Welcome to the largest gaming community on Lemmy! Discussion for all kinds of games. Video games, tabletop games, card games etc.

Rules

1. Submissions have to be related to games

Video games, tabletop, or otherwise. Posts not related to games will be deleted.

This community is focused on games, of all kinds. Any news item or discussion should be related to gaming in some way.

2. No bigotry or harassment, be civil

No bigotry, hardline stance. Try not to get too heated when entering into a discussion or debate.

We are here to talk and discuss about one of our passions, not fight or be exposed to hate. Posts or responses that are hateful will be deleted to keep the atmosphere good. If repeatedly violated, not only will the comment be deleted but a ban will be handed out as well. We judge each case individually.

3. No excessive self-promotion

Try to keep it to 10% self-promotion / 90% other stuff in your post history.

This is to prevent people from posting for the sole purpose of promoting their own website or social media account.

4. Stay on-topic; no memes, funny videos, giveaways, reposts, or low-effort posts

This community is mostly for discussion and news. Remember to search for the thing you're submitting before posting to see if it's already been posted.

We want to keep the quality of posts high. Therefore, memes, funny videos, low-effort posts and reposts are not allowed. We prohibit giveaways because we cannot be sure that the person holding the giveaway will actually do what they promise.

5. Mark Spoilers and NSFW

Make sure to mark your stuff or it may be removed.

No one wants to be spoiled. Therefore, always mark spoilers. Similarly mark NSFW, in case anyone is browsing in a public space or at work.

6. No linking to piracy

Don't share it here, there are other places to find it. Discussion of piracy is fine.

We don't want us moderators or the admins of lemmy.world to get in trouble for linking to piracy. Therefore, any link to piracy will be removed. Discussion of it is of course allowed.

Authorized Regular Threads

Related communities

PM a mod to add your own

Video games

Generic

Help and suggestions

By platform

By type

By games

Language specific

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 10 points 2 weeks ago (4 children)

Now when will Steam do this?

[–] [email protected] 20 points 2 weeks ago

They do. Just not 3rd party.

[–] [email protected] 13 points 2 weeks ago (2 children)

Idk why people think they cant add steam, i have it in my Aegis app.

[–] [email protected] 5 points 1 week ago

How did you manage? Thought steam 2fa was tied to steams app?

[–] [email protected] 1 points 1 week ago* (last edited 1 week ago)

How? I can't get it to give me the TOTP key, it just asks me to download their stupid app.

[–] [email protected] 6 points 2 weeks ago (3 children)

What does GOG's 2FA do that Steam's 2FA doesn't?

[–] [email protected] 27 points 2 weeks ago* (last edited 2 weeks ago)

At a glance (haven't enabled yet, will later today), GoG uses the RFC standard TOTP model. This means you can use whatever app you want whether that is the google authenticator that ties it to your cloud account, something related to your password manager (e.g. keepass or bitwarden), or even just a python script you have in a random directory. It gives you control of your 2FA and protects you in the event you lose a device without properly de-authenticating it.

Valve use their own model that, to my knowledge, is only accessible through the Steam mobile app. Which is a huge nightmare if you ever have a device stolen/damaged (and is why you back up the recovery code)


Just enabled. Yup, bog standard TOTP and they even provide the plaintext key so that I don't have to extract it from a QR code.

[–] [email protected] 6 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

It ~~presumably~~ works with a normal TOTP app.

E: confirmed it works

[–] [email protected] 4 points 2 weeks ago (1 children)

Steam works with a normal TOTP app for me, hell, it works with two normal TOTP apps for me

[–] [email protected] 5 points 2 weeks ago (1 children)

I'm pretty sure it doesn't but I'll bite: How did you set that up?

[–] [email protected] 3 points 2 weeks ago (1 children)

I don't recall, I've set it up a few years ago - I've been trying to look for instructions for another comment, but it seems that they made it VERY difficult for people without rooted Android to obtain the TOTP secret.

Though it is RFC 6238 compliant, using 5 digits instead of 6.

[–] [email protected] 5 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Okay, let's say there's currently no native support for normal TOTP, mostly because Steam doesn't give you access to your TOTP key.

[–] [email protected] 2 points 2 weeks ago (1 children)

That much I can agree with at this point.

Actually, it's arguably even worse - it's not that Steam doesn't support normal TOTP, it's that Steam goes out of their way to prevent TOTP from being used without switching to an entirely new algorithm.

[–] [email protected] 2 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Could be worse. GOG's approach is super annoying, and a lot of platforms (like fucking Apple) actually require the use of insecure and invasive SMS verification. And as far as I know Steam hasn't been hit with any data breaches since 2011.

[–] [email protected] 3 points 2 weeks ago

require the use of insecure and invasive SMS verification

My honest reaction:

[–] [email protected] 2 points 2 weeks ago (2 children)

Unless I’m missing something, Steam only does code to email 2FA, not an actual TOTP app

[–] [email protected] 10 points 2 weeks ago (1 children)

They have TOTP but only in their app.

[–] [email protected] 3 points 2 weeks ago (1 children)

So effectively, they don’t do what GOG is doing.

[–] [email protected] 3 points 2 weeks ago

Not exactly, no

[–] [email protected] -1 points 2 weeks ago (1 children)

Steam works with a normal TOTP app for me, hell, it works with two normal TOTP apps for me

[–] [email protected] 2 points 2 weeks ago (1 children)

Teach a brother how? I swear I couldn’t find it anywhere in the account settings.

[–] [email protected] 3 points 2 weeks ago* (last edited 2 weeks ago)

I don't quite remember how to get the TOTP secret from the Steam app (they could in fact take notes from GOG here), iirc you have to extract it from the Android app via adb;
but once you have it, if this GitHub comment is correct you simply have to set the code size to 5 digits.

If your phone has a rooted Android install, I found this guide.

... I swear when I did it, it wasn't this hard ._.