Recent comments in /f/LifeProTips

sparoc3 t1_j1oul5b wrote

Naah I wasn't phised, I downloaded Adobe Reader crack and then nearly every account of mine was compromised. There's no way they went and reset every account, they must have simply extracted it from browser.

Now I'm using authy tho.

1

keepthetips t1_j1ou7wj wrote

Hello and welcome to r/LifeProTips!

Please help us decide if this post is a good fit for the subreddit by up or downvoting this comment.

If you think that this is great advice to improve your life, please upvote. If you think this doesn't help you in any way, please downvote. If you don't care, leave it for the others to decide.

1

sparoc3 t1_j1ots5c wrote

>Having email confirmation is basically worthless if your email was compromised.

That doesn't mean it's not 2FA.

My gripe is how the fuck did they get my steam password at all.

>If you're not using Steam Guard through the app, you don't have 2FA.

Two factor authentication simply mean 'two' means of authentication, first is password and the second is the code received on email.

Steam guard is an additional thing that necessitates you should be in possession of a particular phone. It's more than 2FA and more secure can said to be 3FA.

Every site on this world sends you code on mail/phone number when 2FA is activated.

0

hitemlow t1_j1ot238 wrote

Having email confirmation is basically worthless if your email was compromised. SMS is only slightly better in that they have to hack 2 devices or do a SIM swap scam. If you're not using Steam Guard through the app, you don't have 2FA.

2

stoneagerock t1_j1os2dr wrote

Download Authy, or one of the plethora of other mobile Authenticator apps. Unfortunately can’t stop you from getting your creds phished by a fake page.

For that you need something like a FIDO2 key that supports key domain binding

2

hitemlow t1_j1orzqr wrote

Unfortunately it's necessary when you change phones. You have to turn off Steam Guard, deauthorize your old phone, log in on your new phone, and reactivate Steam Guard.

Though there are people that just leave it off and that's frankly their own damn fault.

2