Guide

How to Enable 2FA on Steam (Steam Guard)

2026-03-07 · 6 min read · Steven Adams · Last reviewed: March 2026

Your Steam account holds your entire games library — sometimes worth hundreds or thousands of pounds. Steam Guard is Valve's two-factor authentication system, and enabling it is essential to protect your account and unlock full trading capabilities.

In This Guide

  1. Steam Guard: Email vs Mobile
  2. Enable Steam Guard Mobile Authenticator
  3. Enable Steam Guard via Email
  4. Trading & Market Requirements
  5. Recovery Codes
  6. Troubleshooting

Steam Guard: Email vs Mobile Authenticator

Steam offers two levels of Steam Guard protection:

  • Steam Guard via Email — sends a code to your email when logging in from a new device. Basic protection, easy to set up.
  • Steam Guard Mobile Authenticator — generates codes in the Steam mobile app every 30 seconds. Required for trading and the Community Market. This is the recommended option.
Important: The Steam Guard Mobile Authenticator uses a proprietary system built into the Steam app — it cannot be replaced by third-party authenticator apps like Google Authenticator or 2faco. You must use the official Steam mobile app.

Enable Steam Guard Mobile Authenticator

This requires the Steam app on iOS or Android.

  1. Install the Steam app on your phone and log in
  2. Tap the menu icon (☰) in the top left
  3. Go to Steam Guard
  4. Tap Add Authenticator
  5. Enter your phone number — Steam will send an SMS confirmation code
  6. Enter the SMS code to verify your number
  7. Steam will display your Recovery Code — write this down immediately and store it safely
  8. Tap Done — your authenticator is now active

After setup, the Steam app will show a new 5-character code every 30 seconds. You'll need to enter this code whenever you log into Steam on a new device or browser.

Enable Steam Guard via Email

If you don't have a smartphone, you can use the email-based version of Steam Guard.

  1. Open the Steam desktop client and log in
  2. Click Steam in the top menu → Settings
  3. Go to the Security tab
  4. Under Steam Guard, click Manage Steam Guard Account Security
  5. Select Get Steam Guard codes by email
  6. Steam will send a confirmation code to your registered email — enter it to activate

Trading & Community Market Requirements

Valve enforces these rules to prevent stolen account fraud:

  • You must have the Mobile Authenticator enabled for at least 15 days before trading items or listing on the Community Market
  • Email-based Steam Guard does not unlock trading — only the mobile authenticator does
  • Removing and re-adding the authenticator resets the 15-day clock
  • Trades confirmed through the app are instant; trades without the app have a 15-day hold

Save Your Recovery Code

Steam provides a recovery code during setup — it looks like R12345. This is the only way to recover your account if you lose access to your phone.

  • Write it down on paper and store it securely
  • Save it in a password manager
  • Do not store it only on the phone that has the Steam app

To view your recovery code after setup: Steam app → Steam Guard → I no longer have access to my Mobile Authenticator.

Troubleshooting

Steam Guard code not working

Steam Guard codes expire every 30 seconds and are time-sensitive. The most common fix is syncing your phone's clock — go to your phone's time settings and enable "Set time automatically." On the Steam app, you can also go to Steam Guard → More Info → Sync Steam Guard to force a time sync.

Lost my phone / can't access the Steam app

Use your Recovery Code to remove the authenticator: visit Steam's two-factor management page and select "Use a recovery code." You can then re-add the authenticator on your new device. Note: this will trigger a 15-day trade hold.

Not receiving the SMS confirmation

Try a different phone number, check that your number is entered in the correct international format, or wait a few minutes and request the code again. Some carriers delay or block automated SMS messages.

Related Articles

Guide

How to Enable 2FA on Epic Games / Fortnite

Read →
Guide

How to Enable 2FA on Roblox

Read →
Security

SMS vs Authenticator App: Which Is Safer?

Read →

Steam Guard: Valve's Custom 2FA System

Valve does not use standard TOTP codes for Steam. Instead, Steam Guard Mobile Authenticator generates codes using Valve's own implementation within the Steam Mobile app. This means you cannot use Google Authenticator, Authy, or any third-party authenticator app with Steam — you must use the Steam app itself. Steam Guard codes change every 30 seconds like standard TOTP, but the algorithm is Valve-specific. The advantage is that Steam's system is deeply integrated into the platform, providing additional protections like trade holds that standard TOTP cannot offer.

Steam Trade Holds and Marketplace Protection

One unique feature of Steam Guard is its integration with Steam's trading system. Without Steam Guard Mobile Authenticator enabled, all item trades are held for up to 15 days before completion. With Steam Guard enabled for 7 or more days, trades with friends complete instantly. This hold system protects users who have been phished — even if an attacker gains account access, they cannot immediately trade away your inventory items. The 15-day hold gives you time to notice the compromise and recover your account before losing valuable items. Counter-Strike cases, Team Fortress 2 unusual hats, and Dota 2 items have sold for thousands of dollars, making Steam accounts high-value targets.

Recovering Your Steam Account If You Lose Your Phone

When you set up Steam Guard, Steam provides a recovery code. Save this code — it is the only way to remove Steam Guard without your phone. Without the recovery code and without your phone, account recovery requires contacting Steam Support and proving account ownership through original payment methods, CD keys, or account history. Steam's support process is thorough but can take weeks. Steam is known for not making exceptions to its recovery requirements, which makes saving your recovery code essential. Never share it with anyone claiming to be Steam Support — that is always a scam.

Frequently Asked Questions

Can I use Steam on multiple devices with Steam Guard? Yes — Steam Guard is tied to your account, not a specific device. When you install Steam on a new device, you will be asked to verify via the Steam Guard code from your authenticator, or via an email code if you have not set up Mobile Authenticator.

Does Steam Guard protect my Steam Wallet balance? Yes — purchases using your Steam Wallet require account access, which is protected by Steam Guard. Attackers cannot spend your wallet balance without completing login including your 2FA code.

What if I get a Steam Guard code I did not request? This means someone knows your password and is trying to log into your account. Change your password immediately through your Steam account settings and check for unrecognised active sessions under Account Details → Recent Activity.