24
89 million Steam account details just got leaked, so now's a good time to change your password
(www.xda-developers.com)
this post was submitted on 14 May 2025
24 points (78.6% liked)
Steam
639 readers
2 users here now
For Steam Game Stuff
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
From what I understand, these passwords (and the accounts they are linked to) are in a usable form to whoever is buying the lists.
2FA protects you, but changing your password isn't a bad idea (and should be done on a regular basis anyway).
Is changing passwords on a regular basis actually better or just a feeling?
It depends. If your accounts are set up to auto-reject and ban people after X number of failed logins, then a strong password (even without 2fa) should be ok for most people.
But if the service allows for unlimited login attempts, having the same password for months or years gives more time to brute force guess it.
Even in a leak like this, even without anything more than a list of passwords, it could be a valuable collection for a "dictionary password attack".
But why would the passwords be available unhashed?
Lots of unknowns, but this was a "leak", rather than a "hack". Perhaps another article might shed more light into the details of the data, and in what form those passwords are in.