Your friends are messaging you about strange links you never sent. There is a sign-in alert from a country you have never visited, your password suddenly does not work, and the sinking feeling is real. Take a breath. A hijacked Steam account is one of the most recoverable situations out there, because Valve runs a dedicated self-service recovery system that is built for exactly this, and most people get back in by working through it in the right order.
The key is to move quickly but calmly, and to do everything on official Steam pages only. Below is the recovery path from fastest and most common to the locked-out fallback, and then how to seal the account so it does not happen again.
Confirm the Compromise and Start on a Device You Trust
Before anything else, slow down on the basics. Start your recovery from a device, browser, and network you have signed in from before, rather than a borrowed phone or a public computer. Familiar devices reduce friction during automated verification, and they keep you off machines you cannot trust.
Do not create a brand-new Steam account to report the hijack. You only need your existing compromised account details to drive the recovery wizard, and a fresh account adds confusion without helping. The signs that you have genuinely been compromised are the ones you are already seeing, such as contacts receiving messages you did not send, login alerts from an unfamiliar location, or a password that no longer works.
One rule protects you through every step that follows. Only ever enter your password on official Steam sites, which are steampowered.com and steamcommunity.com. Confirm you are on the genuine domain before typing a password or uploading any ID. Steam Support representatives will never ask you for your password, and no real support agent will ever ask you to read out a verification code or a Steam Guard code. Anyone who does is trying to steal the account, not save it.
Open the Stolen-Account Path in Steam's Sign-In Help
Go to help.steampowered.com and open the option called "Help, I can't sign in." This is Steam's official self-recovery wizard, and it lists four recovery options to match different situations.
- 1."I forgot my Steam Account name or password"
- 2."My Steam Account was stolen and I need help recovering it"
- 3."I'm not receiving a Steam Guard code"
- 4."I deleted or lost my Steam Guard Mobile Authenticator"
If your account has been taken over, choose "My Steam Account was stolen and I need help recovering it." If you simply cannot remember your details rather than suspecting a takeover, the "I forgot my Steam Account name or password" option is your starting point instead. You can reach this flow directly at help.steampowered.com/en/wizard/HelpWithLogin, and the stolen-account branch lives at help.steampowered.com/en/wizard/HelpWithAccountStolen.
Clean Your Computer and Secure Your Email First
It is tempting to rush straight to resetting the Steam password, but the stolen-account wizard deliberately puts two things ahead of that, and skipping them often gets you re-hacked within minutes.
Steam's stolen-account wizard instructs you to first run virus and spyware scanners on your computer. If malware is harvesting your credentials, a new password is just a new prize for the attacker.
Next, change the password on the email account linked to Steam. Steam points out that accounts are commonly compromised after the associated email is compromised, because whoever controls your inbox can intercept reset links and Steam Guard codes. Lock the email down before you touch the Steam password, and you remove the attacker's foothold rather than just renaming the lock.
Reset Your Steam Password and Reclaim Access
With your computer cleaned and your email secured, move to the password reset. From the stolen-account wizard, use "Reset my password."
The password reset form asks you to enter your email address or phone number, along with a CAPTCHA, to locate your account. Submit the contact detail you registered with, and Steam uses it to find the right account so you can set a fresh, unique password.
If you do not have access to that email or phone number anymore but you still know your account name, use "Search with my account name" instead. This lets the wizard find your account a different way when the primary contact route is no longer in your hands. You can reach the password help directly at help.steampowered.com/en/wizard/HelpWithLoginInfo.
When the Lookup Fails and You Are Fully Locked Out
Sometimes the automated lookup cannot match you, usually because the attacker changed the email and phone number and you no longer recognize what is on file. The wizard plans for this.
If the lookup fails, it tells you, "If you're unable to find your account, you can click here to contact Steam Support," which routes you to the contact path at help.steampowered.com/en/wizard/HelpRequestCantLogin/. This path is designed to recover an account you can no longer access by the usual means, by escalating to Steam Support rather than dead-ending you.
This is also the moment where patience matters. Steam does not publish a fixed number of minutes, hours, or days for support-assisted recovery, so do not trust any third party promising a guaranteed timeline. And never pay for an account recovery service. These paid services are not endorsed by Steam, frequently make the situation worse, and at best charge you for steps the official wizard performs for free.
Recovering When You Lost Your Steam Guard Mobile Authenticator
If the obstacle is your authenticator rather than a full takeover, there is a dedicated route. Choose "I deleted or lost my Steam Guard Mobile Authenticator," reachable at help.steampowered.com/en/wizard/HelpWithLoginInfo?lost=8&issueid=402.
This path lets you locate your account by email address or phone number to proceed. If you cannot find the account, or you no longer have access to the registered email or phone, the wizard falls back to contacting Steam Support so a person can help, rather than leaving you stranded.
If the Emailed Steam Guard Code Never Arrives
Steam Guard can deliver its codes by email, and a missing code is a common snag during recovery. The Steam Guard Code Help wizard, at help.steampowered.com/en/wizard/HelpWithSteamGuardCode, walks you through the usual causes.
It advises confirming you can access the correct email address, checking your spam filters in case the code was misrouted, and allowing time for delivery before assuming something is broken. If the code genuinely is not coming, the wizard offers "Verify and update my email address," so you can correct an outdated or wrong address on the account. As always, a code that does arrive is for you alone, so never read it aloud or paste it for anyone claiming to help.
Be Ready to Prove the Account Is Yours
When recovery escalates to Steam Support, you may be asked to demonstrate that the account belongs to you. Steam maintains a Providing Proof of Ownership support article for exactly these cases.
You do not need to memorize a checklist in advance, but you should gather your account details and purchase information before you contact Steam Support, so you can respond quickly when prompted. Having that information ready tends to make the handoff smoother and faster, since you are not hunting for receipts mid-conversation.
Lock the Account Down With Steam Guard and a Security Review
Regaining access is only half the job. The other half is making sure the intruder cannot simply walk back in.
After you are back in, follow Steam's Account Security Recommendations and enable or confirm Steam Guard. Steam Guard is Steam's two-factor protection, available either as an emailed code or as the Steam Guard Mobile Authenticator inside the Steam Mobile App. Steam describes the Mobile Authenticator as the highest level of security for your account, so moving from email codes to the Mobile Authenticator is the single strongest upgrade you can make.
Set a brand-new password that you do not reuse anywhere else, keep the email account behind Steam protected with its own two-factor, and treat any future support message that asks for a code or password as an attack. With your computer scanned, your email locked, your Steam password reset, and the Mobile Authenticator active, you have closed the doors the attacker came through.
Using the Self Locking Tool to Freeze a Hijacked Account
If the takeover is active and you want to halt it while you work, Steam provides a Self Locking Tool together with a "Login and unlock my account" flow at help.steampowered.com/en/wizard/HelpSelfUnlock. This lets you lock and later unlock the account through official channels.
Before you unlock, Steam reminds you to "make sure you've secured your email account, your computer, and your Steam account itself." In other words, do not lift the lock until the cleanup is done, or you risk handing control straight back to whoever took it.
Frequently Asked Questions
Will Steam Support ever ask for my password or a Steam Guard code?
No. Steam Support representatives will never ask you for your password, and no legitimate agent will ask you to share a verification code or Steam Guard code. Anyone requesting those is trying to take the account, so refuse and continue only through the official wizard at help.steampowered.com.
Should I make a new account to report that mine was stolen?
No. You do not need a new account to start recovery. Use the existing compromised account in Steam's "Help, I can't sign in" wizard, ideally from a device, browser, and network you have signed in from before. A fresh account only adds confusion.
How long does Steam account recovery take?
Steam does not publish a fixed recovery timeline on its official recovery pages, so the duration is not stated. Because of that, be wary of anyone promising a guaranteed turnaround, and never pay a third-party recovery service claiming to speed it up.
The attacker controls my email and phone, so what can I do?
If the automated lookup cannot find or verify your account, the wizard offers to contact Steam Support and routes you to help.steampowered.com/en/wizard/HelpRequestCantLogin/, which is built to recover accounts you can no longer access by the usual means.
I am not receiving my Steam Guard email code, so what now?
Open the Steam Guard Code Help wizard at help.steampowered.com/en/wizard/HelpWithSteamGuardCode. Confirm you can access the correct email address, check your spam filters, and allow time for delivery. If it still does not arrive, use the wizard's "Verify and update my email address" option.
What is the strongest way to protect my Steam account after recovery?
Follow Steam's Account Security Recommendations and enable Steam Guard. Steam describes the Steam Guard Mobile Authenticator in the Steam Mobile App as the highest level of security for your account, so switching from emailed codes to the Mobile Authenticator is the best protection available.
