You can now use authenticator apps to keep your GOG account secure!
-
They have TOTP but only in their app.
So effectively, they don’t do what GOG is doing.
-
So effectively, they don’t do what GOG is doing.
Not exactly, no
-
This post did not contain any content.wrote last edited by [email protected]
2FA (Time-based One-Time Password) login
Gog, how are you even securing accounts?
You mean securing access to accounts through 3rd party TOTP, which again, isn't sessioning access authenticatively. We already invented that. -
It
presumablyworks with a normal TOTP app.E: confirmed it works
Steam works with a normal TOTP app for me, hell, it works with two normal TOTP apps for me
-
Unless I’m missing something, Steam only does code to email 2FA, not an actual TOTP app
Steam works with a normal TOTP app for me, hell, it works with two normal TOTP apps for me
-
Steam works with a normal TOTP app for me, hell, it works with two normal TOTP apps for me
Teach a brother how? I swear I couldn’t find it anywhere in the account settings.
-
Now when will Steam do this?
Idk why people think they cant add steam, i have it in my Aegis app.
-
Steam works with a normal TOTP app for me, hell, it works with two normal TOTP apps for me
I'm pretty sure it doesn't but I'll bite: How did you set that up?
-
Teach a brother how? I swear I couldn’t find it anywhere in the account settings.
wrote last edited by [email protected]I don't quite remember how to get the TOTP secret from the Steam app (they could in fact take notes from GOG here), iirc you have to extract it from the Android app via adb;
but once you have it, if this GitHub comment is correct you simply have to set the code size to 5 digits.If your phone has a rooted Android install, I found this guide.
... I swear when I did it, it wasn't this hard ._.
-
I'm pretty sure it doesn't but I'll bite: How did you set that up?
I don't recall, I've set it up a few years ago - I've been trying to look for instructions for another comment, but it seems that they made it VERY difficult for people without rooted Android to obtain the TOTP secret.
Though it is RFC 6238 compliant, using 5 digits instead of 6.
-
Thanks for this. Long overdue from GOG.
Their platform is really outdated. Can’t even edit or remove a game review without contacting support. It’s dumb. They’re losing precious time because of this
-
I don't recall, I've set it up a few years ago - I've been trying to look for instructions for another comment, but it seems that they made it VERY difficult for people without rooted Android to obtain the TOTP secret.
Though it is RFC 6238 compliant, using 5 digits instead of 6.
wrote last edited by [email protected]Okay, let's say there's currently no native support for normal TOTP, mostly because Steam doesn't give you access to your TOTP key.
-
Okay, let's say there's currently no native support for normal TOTP, mostly because Steam doesn't give you access to your TOTP key.
That much I can agree with at this point.
Actually, it's arguably even worse - it's not that Steam doesn't support normal TOTP, it's that Steam goes out of their way to prevent TOTP from being used without switching to an entirely new algorithm.
-
That much I can agree with at this point.
Actually, it's arguably even worse - it's not that Steam doesn't support normal TOTP, it's that Steam goes out of their way to prevent TOTP from being used without switching to an entirely new algorithm.
wrote last edited by [email protected]Could be worse. GOG's approach is super annoying, and a lot of platforms (like fucking Apple) actually require the use of insecure and invasive SMS verification. And as far as I know Steam hasn't been hit with any data breaches since 2011.
-
This post did not contain any content.
About time
-
This post did not contain any content.
Thanks, and added.
Although it would have been nice if I could "upgrade" from email based 2step instead of having to disable it.
-
Could be worse. GOG's approach is super annoying, and a lot of platforms (like fucking Apple) actually require the use of insecure and invasive SMS verification. And as far as I know Steam hasn't been hit with any data breaches since 2011.
require the use of insecure and invasive SMS verification
My honest reaction:
-
Idk why people think they cant add steam, i have it in my Aegis app.
How did you manage? Thought steam 2fa was tied to steams app?
-
Their platform is really outdated. Can’t even edit or remove a game review without contacting support. It’s dumb. They’re losing precious time because of this
the store is a losing proposition right now from CDPR perspective. I am just happy to have a different place I can buy games that's not steam
-
This post did not contain any content.
Does it still work with Heroic and Lutris?
