Steam Account Stolen

[Gusington]

^yeah

[Yskonyn]

Just as a re-assurance: once steam guard is activated you only need your mobile the first time you login on a new device or browser. So it isnt much of a hassle.

[airboy]

Really sorry to hear this.

[Zulu1966]

Well - credit to steam support - all back and working - thanks - now busy enabling steam guard mobile. Thanks for the advice here.
Phew !!!

[Zulu1966]

Just as a re-assurance: once steam guard is activated you only need your mobile the first time you login on a new device or browser. So it isnt much of a hassle.

Yes you are right thinking about it ... had the email version on but obviously no use if they get at your mail account as well. Having been bitten I will set up the mobile but was leery of it being an app on the phone rather than just a text message with a code. But will install it anyhow now.

[JudgeDredd]

Well - credit to steam support - all back and working - thanks - now busy enabling steam guard mobile. Thanks for the advice here.
Phew !!!

Excellent  O0

I remember the days when Steam Support was completely AWOL  :'(

[Tpek]

If they managed to hack both your email and Steam accounts, chances are that they've done it by hacking whatever computer you logged into both of these from.

I'd recommend doing a full good scan with a quality anti-virus, and possibly reconsider reformatting the device.

[Tuna]

Always a good idea to have different passwords for all your important accounts. So Email, Finance, Medical, 401k.. Steam.. All different passwords..

[Zulu1966]

Always a good idea to have different passwords for all your important accounts. So Email, Finance, Medical, 401k.. Steam.. All different passwords..

Yes mistake I made. Now everything will be 23 characters long and different.

[Tuna]

I just use different combination of car license plates, kids Initials and a favorite symbol or two.. Then I have a word document that gives me hints based on those on what the passwords are (so pretty much, only I would understand what the hints were).

[DennisS]

Yeah, it sucks. I've had my identity stolen twice in the last 15 years, but not from online stuff. Trust me, I know how much of a pain it is.

I won't ever assign CC or account info to Steam. I think you guys have reported it happening there once every couple of years. I just don't want/need to take that chance for the convenience of having my paid info on file with them.
[/quote!

One time use steam cards. I estimate close to three thousand dollars in the last six years. I have kept them all, 20's, 50's, and the rare 100's in my desk drawer. Pretty impressive stack!

[Philippe]

The idea of someone hacking into a Steam account is pretty scary.  Was this someone you had had contact with, or did they get a hold of your account some other way?

[Barthheart]

Changed my password because of this. Glad it worked out Zulu.  O0

[Zulu1966]

The idea of someone hacking into a Steam account is pretty scary.  Was this someone you had had contact with, or did they get a hold of your account some other way?

No. I had steam guard on but only via email. So obviously he had my user name which is publicly available  couple that with a  poor password and he was in. As I said earlier once into that steam store email address in plain text. So he could then try and hack that to intercept the codes that were sent to authorise the the changes they made.

The IP address that did this was somewhere in the Ukraine. So apart from the fact that he was a thieving scumbag largely an issue with my poor password security.

Still a salutary lesson to be a bit more robust with things and take advantage of the additional security features on offer  which I will be doing.

[Ian C]

never use one-word passwords. Use combination of capitals, numbers, spaces and special characters.

Your password is

password   =  cracked instantly
1234    =  cracked instantly
Kylie    = cracked in 10 milliseconds
taurus1966    =  cracked in 1 day
Pass_LikE&&THI5 = 16 billion years
CaptialS spaces &specialCaractErs$1   = cracked in 2 sexdecillion years

link:  https://howsecureismypassword.net/

also, use a physical notebook.