How to protect your Steam account from theft
Step-by-step protection for a Steam account with a CS2 inventory: Steam Guard, phishing sites, API key, session checks and what to do if you are hacked.
CS2 accounts with valuable inventories are a common target for scammers. Almost all thefts happen not because of "hacking", but because the owner enters their details on a fake site.
🔧 1. Steam Guard in the mobile app
Install the official Steam Mobile app.
Enable Steam Guard in the app — login codes and trade confirmations will only come there.
Add a phone number and an email you control.
🛡️ 2. Phishing sites
Log in to Steam only at
store.steampowered.comandsteamcommunity.com.A "Sign in through Steam" window on a third-party site must open as a separate browser window showing the real address. If you cannot drag the window outside the page, it is fake.
Do not follow links from DMs like "vote for my team" or "claim your skin".
🔑 3. API key
Open steamcommunity.com/dev/apikey. If there is a key you did not create, revoke it and change your password. Scammers use it to hijack your trades.
📌 4. Sessions
Steam → Settings → Security → Deauthorize all other devices — logs out every other session.
🎯 If your account is stolen
Recover access immediately at
help.steampowered.com.Change your email password.
Revoke the API key and deauthorize devices.
⚠️ Never
Share Steam Guard codes or your password with anyone.
Install "inventory checker" programs from strangers.