1
89 million Steam account details just got leaked, so now's a good time to change your password
(www.xda-developers.com)
this post was submitted on 14 May 2025
1 points (100.0% liked)
Steam
748 readers
2 users here now
For Steam Game Stuff
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
It depends. If your accounts are set up to auto-reject and ban people after X number of failed logins, then a strong password (even without 2fa) should be ok for most people.
But if the service allows for unlimited login attempts, having the same password for months or years gives more time to brute force guess it.
Even in a leak like this, even without anything more than a list of passwords, it could be a valuable collection for a "dictionary password attack".
But why would the passwords be available unhashed?