Valve Enhances Security on Steam with SMS Verification for Developers

To secure the Steam platform, Valve is set to introduce SMS verification for developers. 

This move comes in response to a series of hacker attacks on several developers' accounts on Steamworks, implanting malware into various game builds.

Understanding the Security Threat

The recent attacks on the Steamworks platform highlight the growing concerns of digital security. 

Around 100 Steam users regularly get affected by such malicious attacks

One developer, Benoît Freslon, revealed that the hackers had gained control of his browser access tokens, which compromised his access to various services he was logged into.

Also Read: Sony Faces New Cybersecurity Threat from Ransomed.vc

Valve's Response to the Threat

To address these security challenges, Valve is creating significant changes in how builds are managed within Steamworks. 

This free suite of tools, created for developers, allows them to seamlessly integrate Steam's functions into their products. 

One crucial change involves the procedure for adding new users to the Steamworks group.

Valve now mandates that a phone number be linked to each user's Steamworks account. 

This addition enables Steam to send verification messages to developers before they can set a game build live. 

For developers aiming to update a build to the default branch of an already released app, Steam will send a confirmation code via text message. 

This code must be entered to set the default branch. 

However, it's worth noting that you won't require a code for apps that are yet to be released or when updating a beta branch.

Two-Factor Authentication for Enhanced Security

Moreover, the two-factor authentication process will also be integrated for Steamworks administrators looking to invite new members to their group. 

Alongside the traditional email verification, administrators extending invitations will need to input an SMS code before they can send out their invites.

These changes are scheduled for implementation later this month, precisely on the 24th of October.

Valve strongly encourages users to connect their phone numbers to their accounts promptly. 

Furthermore, they hint at the possibility of "adding this requirement for other Steamworks actions" in the future, ensuring the security of their platform remains paramount.

Conclusion

Valve's decision to introduce SMS verification for developers on Steamworks is a crucial step in enhancing security on the platform. 

This measure not only provides developers with an extra layer of protection but also offers peace of mind to the countless gamers who use Steam.