The biggest indicator that your account has been hacked is if it has been logged in from someone else, somewhere else that is not you. Fortunately, Steam allows you to check when and where your account has been logged in.

On the Steam interface, proceed to the help section on the top left corner of the screen, and click Steam Support.









If you are using via the web, the Support button can be directly accessed.

Click "My Account"

Click on "Data related to your Steam Account"

Scroll all the way until you see "Recent Login History" and click it.

You should now be viewing all your account's previous logins.
You are able to see the Login Time, Logoff Time, Operating System (OS) type, the Country, City and State your account was accessed from.

Look through the entire list to see if something does not seem right.
For example, if the login was from a city and/or state that you have not been to recently, there is a high chance you've been hacked. Immediately change your password just in case.
(Note that due to how Steam bases the location on IP, it might show a login from a state nearby yours within the same country. In this case it should be fine.)

If you're worried about a hack coming from the same city as you, check the login times to see if they make sense to you or if you can notice something is off (e.g. a login at a time when you're normally away/asleep).

Note that Logoff Time does not always show up, but that is not important.

The OS type indicate was type of operating system was used. I normally use Steam on my PC and my mobile phone so I should be expecting at most 2 different OS types. You may sometimes get a -1 but that is just an error.

Some values for OS type are:
16 = Windows 10
20 = Windows 11
-400 = Mobile app
-700 = Web browser
-203 to -186 = Linux
-102 to -82 = Mac OS

Good job! Chances are your account is safe!

If this happens, do not panic. If you have Steam Guard Mobile Authenticator and have two-factor authenticator enabled, the hacker is unable to trade your items out of your inventory, even if they have your account (unless they also hacked your phone). They are still able to make trades, but can not confirm any if it involves your items moving out of the account. Accounts without the authenticator will have a 15-day trade hold to protect the items.

You can check if this is happening by looking into your Trade Offers











Look through and see if there was a trade that you do not remember making, and quickly cancel it.
You can also look into your trade and inventory history to see if anything was lost.

The Steam API key is a key unique to each account that allows outside programs to act on a steam accounts behalf. This is how trade bots are created.

Even if a scammer has access to your steam account, they don’t have access to your mobile authenticator, so they can’t just send themselves a trade, this is why they create an API key for your account. They use this key to connect your account to their program and then all they have to do is wait for you to make a trade. When you deposit an item to a trading site, the site will send you a trade offer. The scammers program will automatically decline this trade on your behalf and immediately send you a different trade from the scammers bot, made to look exactly like the bot you were going to trade with. If this trade is authenticated on your mobile, the item is sent to the fake bot and the unsuspecting user has been scammed.


To check if your account has an API key:

If you noticed your account being logged in from other places, you can log our account out of all devices.
Click "Account Details" from the top right corner of the interface/webpage.


Click "Manage Steam Guard"


Click this button


Change your password to prevent others from logging in again.

NEVER click on a suspicious link sent to you by anyone. Scammers often use a fake Steam login page in order to trick people into putting in their username, password and even the special access code for new browsers.

DO NOT trade your items over to a "friend" if they promise to keep it safe for you. This is another tactic used by scammers if they do not have the ability to confirm trades, they make you do it for them. Scammers can easily copy names, profile pictures and pretend to be someone you known for a long time.

BE ALERT. If you get a random friend request from someone with no mutual friends, you should either ignore it, or proceed with caution and accept it.