Set up Steam Guard and protect your recovery access
The Steam mobile authenticator adds a confirmation step to account access and trading. It is useful only if you check what you are approving and keep a safe way to recover access when a phone is lost.
Enable Steam’s mobile authenticator, keep recovery information safe and understand why security changes can affect trading availability.
Set up the authenticator through the official app
Install the official Steam mobile app from the link provided by Steam or your device’s official app store. Sign into your own account and open Steam Guard. Follow the current setup flow, including any phone-number verification requested by Steam. Do not follow instructions from a person who asks you to share the verification code.
Store the recovery information securely, separate from the phone itself. Check that you can access the associated email and phone number. Never put a recovery code in an inventory screenshot or send it to a supposed support representative. Account recovery details should remain under your control.
Confirm deliberately and plan for a phone change
Before approving a login, check that you initiated it and recognise the request. Before approving a trade or listing, compare the account and item details with the transaction you intended. The authenticator cannot protect you if you approve an attacker’s request without reading it.
When moving to a new phone, use Steam’s transfer or recovery instructions rather than removing protection without a plan. Security changes can affect market or trade eligibility, and different actions have different consequences. Read the notice shown for your account; do not assume that every restriction lasts the same number of days. Keep the old device available until the transfer is confirmed when possible.
Frequently asked questions
Should I approve a request sent by someone claiming to be support?
No. Only approve an authentication or trade action that you initiated and verified in the official interface.
Can I lose access if my phone breaks?
Recovery may be possible through Steam’s official process, but preparation matters. Keep recovery information and access to your account’s email and phone number secure.
How to spot a Steam trade scam before confirming
Check recipients, login pages and mobile confirmations. Recognise fake support, copied bots, misleading trade messages and account-access scams.
Read guide
How to revoke a Steam API key and secure the account
Find the official API-key page, revoke an unfamiliar key and understand why checking devices and securing email are also necessary after a compromise.
Read guide