Thanks for pointing this out. Yeah, steam rolling their own stuff is a bit troublesome at ties, but I think they were among the first to use TOTP tokens, IIRC

Thanks for pointing this out. Yeah, steam rolling their own stuff is a bit troublesome at ties, but I think they were among the first to use TOTP tokens, IIRC ? There was a story here the other day on how they roll their own password encryption over HTTPS for logging in... It's a shame they don't use standard authentication mechanisms, though. And I should clarify: my yubikey is my main 2FA token, though support for U2F/Webauthn is a bit limited.