this post was submitted on 19 May 2025
289 points (99.0% liked)

Games

38748 readers
1866 users here now

Welcome to the largest gaming community on Lemmy! Discussion for all kinds of games. Video games, tabletop games, card games etc.

Weekly Threads:

What Are You Playing?

The Weekly Discussion Topic

Rules:

  1. Submissions have to be related to games

  2. No bigotry or harassment, be civil

  3. No excessive self-promotion

  4. Stay on-topic; no memes, funny videos, giveaways, reposts, or low-effort posts

  5. Mark Spoilers and NSFW

  6. No linking to piracy

More information about the community rules can be found here and here.

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Ulrich@feddit.org 5 points 5 days ago (1 children)

I'm pretty sure it doesn't but I'll bite: How did you set that up?

[–] Sonotsugipaa@lemmy.dbzer0.com 3 points 4 days ago (1 children)

I don't recall, I've set it up a few years ago - I've been trying to look for instructions for another comment, but it seems that they made it VERY difficult for people without rooted Android to obtain the TOTP secret.

Though it is RFC 6238 compliant, using 5 digits instead of 6.

[–] Ulrich@feddit.org 5 points 4 days ago* (last edited 4 days ago) (1 children)

Okay, let's say there's currently no native support for normal TOTP, mostly because Steam doesn't give you access to your TOTP key.

[–] Sonotsugipaa@lemmy.dbzer0.com 2 points 4 days ago (1 children)

That much I can agree with at this point.

Actually, it's arguably even worse - it's not that Steam doesn't support normal TOTP, it's that Steam goes out of their way to prevent TOTP from being used without switching to an entirely new algorithm.

[–] Ulrich@feddit.org 2 points 4 days ago* (last edited 4 days ago) (1 children)

Could be worse. GOG's approach is super annoying, and a lot of platforms (like fucking Apple) actually require the use of insecure and invasive SMS verification. And as far as I know Steam hasn't been hit with any data breaches since 2011.

[–] Sonotsugipaa@lemmy.dbzer0.com 4 points 4 days ago

require the use of insecure and invasive SMS verification

My honest reaction: