Steam Guard adds a security layer that stops someone else from logging into your account, even if they have your password
Steam Guard is a two-step verification system that Valve built into Steam. When you turn it on, logging in from a new device requires a code that only you can receive — either through your email or through the Steam mobile app. This means a stolen password alone cannot get someone into your account.
You can set up Steam Guard in about five minutes. The process differs slightly depending on whether you want codes sent to your email or prefer to use the Steam app on your phone. Both methods work equally well; the app method is faster if you log in from different devices often.
Key Takeaways
- Steam Guard requires a verification code when you log in from a device Steam has not seen before, protecting your account even if your password is compromised.
- Email-based Steam Guard sends codes to your registered email address and works on any device with internet access.
- The Steam mobile app method is faster for frequent logins but requires you to have the app installed on your phone.
- Turning on Steam Guard takes about five minutes and does not prevent you from playing games offline.
- You should save your recovery codes in a safe place in case you lose access to your email or phone.
Enable Steam Guard through email
Open Steam on your computer and click your username in the top right corner. Select Account from the dropdown menu. On the Account page, find the section labeled Steam Guard and click Manage Steam Guard.
Choose Email Authenticator from the options presented. Steam will send a verification code to the email address linked to your account. Check your inbox (and spam folder if needed), copy that code, and paste it into the box Steam shows you. Once you confirm the code, email-based Steam Guard is active.
Steam will now ask you to save your recovery codes — a list of one-time codes you can use if you ever lose access to your email. Write these down or save them in a password manager. Store them somewhere separate from your Steam password. If you lose both your email and these codes, recovering your account becomes much harder.
Enable Steam Guard through the mobile app
read the Steam app from the Apple App Store or Google Play Store and log in with your account. Open the app and tap the menu icon (three horizontal lines) in the bottom right. Select Account, then Steam Guard.
Tap Set up Steam Guard and choose Authenticator. The app will display a QR code and a long string of characters. If you want to use the QR code, point your phone's camera at it and the app will set itself up automatically. If the QR code does not work, you can manually enter the character string instead.
Once the authenticator is active in the app, Steam will ask for a code from the app to confirm the setup is working. Open the Steam app, find the six-digit code under your account name, and enter it into the browser window. The app-based Steam Guard is now enabled. Like the email method, save your recovery codes somewhere safe.
What happens when you log in with Steam Guard on
The first time you log in from a new computer or browser, Steam will ask for a verification code after you enter your password. If you chose email authentication, check your inbox for a code from Steam and type it in. If you chose the app method, open the Steam app and read the six-digit code displayed there.
Once you enter the code correctly, Steam remembers that device for future logins. You will not need a code every single time — only when logging in from a device Steam has not seen before. This means you can still log in quickly on your main gaming computer while staying protected against unauthorized access from elsewhere.
Switching between email and app authentication
You can change your Steam Guard method at any time. Go back to Account > Steam Guard > Manage Steam Guard and select a different option. If you switch from email to the app, Steam will disable email codes and set up the authenticator instead. If you switch back, the reverse happens.
You cannot use both methods at the same time — Steam Guard works with one method or the other. Choose whichever fits your routine better. If you use your phone constantly, the app is faster. If you prefer not to install extra apps or often use different phones, email is more reliable.
What to do if you lose access to your email or phone
This is why saving your recovery codes matters. If you cannot receive codes anymore — your email is hacked, your phone is lost, or the app stops working — you can use one of your recovery codes to log in instead. Each code works once, so use them only when necessary.
If you have lost both your recovery codes and access to your email or phone, you will need to contact Steam Support. Go to help.steampowered.com, click Contact Steam Support, and explain that you cannot access your Steam Guard codes. Steam Support can verify your identity through account history and help you regain access, but this process takes longer than using a recovery code.
Steam Guard does not affect offline play or game performance
Turning on Steam Guard does not slow down your games or prevent you from playing offline. Once you are logged in on a device Steam recognizes, the verification code requirement disappears until you log in from somewhere new. Your games run exactly as they did before.
If your internet goes down, you can still play games you have already downloaded on that device. Steam Guard only checks your identity during login, not during gameplay. The only time you might notice Steam Guard is the first login on a new device, which takes an extra minute to complete.
Frequently Asked Questions
Do I have to use Steam Guard?
No, Steam Guard is optional. However, using it significantly reduces the risk of account theft. If someone obtains your password through a data breach or phishing, they cannot access your account without also having your email or phone. Most gaming accounts with valuable items or payment methods stored should have Steam Guard enabled.
What if I get a Steam Guard code I did not request?
If you receive a code you did not ask for, someone else may be trying to log into your account. Do not share the code with anyone. If this happens repeatedly, change your Steam password when ready and check whether your email address has been compromised in a data breach. You can check this at haveibeenpwned.com.
Can I use Steam Guard on multiple devices?
Yes. The authenticator app can be installed on multiple phones, and email codes work on any device. However, you can only have one active Steam Guard method at a time. If you use the app, install it on your primary phone. If you use email, any device with internet access can receive codes.
How long do Steam Guard codes last?
Email codes expire after 24 hours if you do not use them. App-based codes change every 30 seconds, so you need to enter them quickly. If a code expires before you finish typing it, just wait for the next one to appear in the app or request a new email code.
Will Steam Guard slow down my login?
Only on new devices. Once Steam recognizes a device, you log in normally without needing a code. The first login on a new computer or browser takes an extra minute to retrieve and enter the code, but subsequent logins on that same device are just as fast as before.