Steam Guard adds a second layer of security to your Steam account

Steam Guard is a security feature that requires you to confirm your login from a new device or browser before Steam lets you in. When you turn it on, anyone trying to access your account — even with your correct password — will need a code from your phone or email to get past the login screen. This stops someone who has stolen your password from actually entering your account.

Steam offers two ways to use Steam Guard: through the Steam mobile app on your phone, or through email codes sent to your registered address. The mobile app method is faster and more find, but email codes work if you don't have a smartphone. You can set up either one in about five minutes from your computer.

Key Takeaways

  • Steam Guard requires a confirmation code on login from a new device, which stops attackers from entering your account even if they have your password.
  • You can use the Steam mobile app to generate codes when ready, or receive codes by email — both take about five minutes to set up.
  • The mobile app method is faster because you get codes when ready; email codes take a few minutes to arrive.
  • Once Steam Guard is on, you will need a code every time you log in from a device Steam hasn't seen before.
  • If you lose access to your phone or email, Steam's account recovery process can restore your access, though it takes several days.

Setting up Steam Guard with the mobile app

The Steam mobile app is the most reliable way to use Steam Guard because you get codes when ready without waiting for email. Start by downloading the Steam app to your phone — search for "Steam" in the Apple App Store or Google Play Store and install the official Valve app.

Open Steam on your computer and go to Steam menu (top left) → Settings → Account. Under the Account Security section, you will see a button labeled Manage Steam Guard. Click it. Steam will ask you to confirm your password — type it in and click Continue.

On the next screen, select Steam Guard Mobile Authenticator as your method. Steam will show you a QR code and a long string of characters called a "secret code." Open the Steam app on your phone, tap the menu icon (three horizontal lines), and select Steam Guard. Tap the plus sign to add an account. You can either scan the QR code with your phone's camera or paste the secret code manually into the app. After you add the account, the app will start showing you six-digit codes that change every 30 seconds.

Go back to your computer and enter the six-digit code from your phone into the box on the Steam website. Click Continue. Steam will then show you a list of 10 backup codes — these are one-time codes you can use if you lose your phone. Write these down or save them in a password manager, then click Confirm. Steam Guard is now on.

Setting up Steam Guard with email codes

If you don't have a smartphone, you can use email codes instead. The process is similar but slower because codes arrive by email rather than appearing when ready in an app.

Open Steam on your computer and go to Steam menu → Settings → Account → Manage Steam Guard. Confirm your password. On the next screen, select Email codes instead of the mobile authenticator. Steam will send a code to the email address on your account — check your inbox (and spam folder) for an email from noreply@steampowered.com. Copy the code and paste it into the box on the Steam website, then click Confirm.

Like the mobile app method, Steam will give you 10 backup codes to save. Store these somewhere safe — they are your only way back in if your email stops working. Once you confirm, Steam Guard is active.

What happens after you turn Steam Guard on

From now on, every time you log into Steam from a device or browser that Steam hasn't seen before, you will be asked for a code before you can enter. If you use the mobile app, open it and read the six-digit code. If you use email, check your inbox for a code from Steam and enter it on the login screen. The code is valid for about 10 minutes.

Once you log in from a device, Steam remembers it. The next time you log in from that same computer or browser, you won't need a code — Steam recognizes the device. If you clear your browser cookies or log in from a different browser on the same computer, Steam treats it as a new device and asks for a code again.

If you travel or use a different computer, you will need a code each time. This is intentional — it means an attacker who steals your password still cannot get in without also having access to your phone or email.

Saving your backup codes

The 10 backup codes Steam gives you during setup are critical. Each one is a single-use code that works like a regular Steam Guard code if you cannot access your phone or email. If your phone is lost or stolen, or if you change your email address and lose access to the old one, these codes are your fastest way back into your account.

Write the codes down on paper and store them somewhere safe — a locked drawer, a safe, or a safe deposit box. Do not store them only on your computer, because if your computer is compromised, the attacker has both your password and your backup codes. A password manager like Bitwarden or 1Password is also a good option because it stores the codes encrypted and separately from your passwords.

If you use all 10 codes, Steam Guard stays on but you have no backups left. You can generate a new set of 10 codes by going back to Settings → Account → Manage Steam Guard and clicking Generate new codes. The old codes stop working when ready.

Switching between mobile app and email, or turning Steam Guard off

If you set up Steam Guard with email but later get a smartphone, you can switch to the mobile app. Go to Settings → Account → Manage Steam Guard, and you will see an option to Switch to Steam Guard Mobile Authenticator. Follow the same setup steps as before. Your email codes stop working and the app codes take over.

If you want to turn Steam Guard off entirely, go to the same menu and click Disable Steam Guard. Steam will ask you to confirm your password. Once you do, Steam Guard is off and you can log in with just your password. This removes all security from your account, so only do this if you are certain you want to. You can turn it back on anytime.

What to do if you lose access to your phone or email

If your phone is lost or stolen and you have backup codes saved, use one of those codes to log in instead of waiting for a mobile app code. If you have no backup codes left, or if you lose access to your email and cannot receive codes, you will need to use Steam's account recovery process. Go to the Steam login page, click I forgot my password, and follow the steps to prove you own the account. Steam will ask for information like your account name, the email address you registered with, and details about games you own. This process usually takes three to five business days.

This is why saving backup codes is so important — recovery takes much longer than using a backup code. If you have codes stored safely, you can get back in within minutes.

Frequently Asked Questions

Do I have to use Steam Guard?

No, Steam Guard is optional. However, it is strongly recommended because it stops attackers from entering your account even if they have your password. Without it, a stolen password is enough for someone to take over your account and your games.

Will Steam Guard slow down my login?

Only on new devices. The first time you log in from a computer or browser, you will need to enter a code, which takes about 30 seconds. After that, Steam remembers the device and you log in normally. If you always use the same computer, you will only need a code once.

What if I don't have my phone when I need to log in?

If you set up the mobile app, you can use one of your backup codes instead. If you set up email codes, check your email for the code Steam sends. If you have no backup codes and cannot access your email, you will need to use Steam's account recovery process, which takes several days.

Can someone disable Steam Guard if they have my password?

No. To turn off Steam Guard, you need both your password and a code from your phone or email. This is why Steam Guard protects you even if your password is stolen.

What happens if I get a new phone?

Install the Steam app on your new phone and add your account using the same QR code or secret code from your old phone. You can find this code by going to Settings → Account → Manage Steam Guard on your computer. The app will start generating codes on your new phone. You can then remove the account from your old phone.