Steam Friends

• Anyone can attempt to add you - Users can add you to their Friends list by observing your in-game nickname, or if they know your account's contact e-mail address - for this reason we recommend that you keep in mind that the users who have added you may not be people you have spoken with before. Users can change their Friends nicknames at any time.
• Account Phishing - Attempting to trick other users into providing password information is commonly called "phishing" - unfortunately, some individuals are using deliberately-deceptive Friends nicknames to request password information from other users. Steam Support does not use the Friends network to contact users, nor will we request CD Key information or credit card purchase information unless you have contacted us for assistance or the information is being sent to steamsupport@support.steampowered.com

Select a Strong Password

A strong password is a necessary first step toward ensuring the security of your account. Your password should meet all of the minimum requirements listed below:

• Use at least 6 characters
• Use a combination of uppercase and lowercase letters.
• Include at least one number within the password
• Do not use a name, a word that could be found in the dictionary, or a series of letters as it appears on the keyboard ("qwerty" and "12345" are not secure passwords)

General Security Recommendations

In addition to selecting a strong password, it is a good idea to maintain the security of your system in the following ways:

Use Unique Passwords

Make sure you are using a different password for your Steam account, your Steam Support account, and your contact e-mail address.

If you participate in any gaming forums, make sure that your username and password on the forum site is different from your Steam username and password.

Scan Your Computer

Regularly scan your computer for viruses, key loggers, spyware, and other malicious code with a virus scan utility that has the most recent virus definitions.

Avoid Insecure Computers

Avoid accessing your Steam Account from internet cafes or shared computers - if you must use an internet cafe or shared computer, make sure it has been scanned for viruses, trojans, and keyloggers.

Things to Watch Out For

Account hijackers have several common methods of attack - the majority of account hijackings occur when users share their Steam account information with a hijacker. Watch out for the activities listed below to ensure your account's security:

Other users asking for login and password information

Requests for login / password information from users on IRC or over instant messaging services (Sharing or trading accounts is a violation of the Steam Subscriber Agreement - please do not share your account login information)

Login / Password requests from users posing as Steam Support (Phishing Scams)

Unsolicited e-mail requests for login / password information and images of CD Keys (Steam Support will never ask for your password, nor will Steam Support send out bulk notices by e-mail - additionally, any messages from Steam Support will originate from support.steampowered.com domain)

Malicious programs in downloads

Executable files for download over the internet (It is not uncommon for executable (.EXE) files being offered as "mods" to contain malicious software designed to steal Steam account login information)