dearsky/pico-fido
1
0
Fork 0
Code Issues 46 Pull Requests 1 Actions Packages Projects Releases 22 Wiki Activity

Steam TOTP Support #190

New Issue
Open
opened 2025-10-05 03:41:14 +08:00 by Hellscaped · 6 comments
Hellscaped commented 2025-10-05 03:41:14 +08:00 (Migrated from github.com)
Copy Link

Steam uses a modified version of the algorithm.... There are ways to extract the TOTP token via root (I have done this) but I'd like to give my physical key it

Steam uses a modified version of the algorithm.... There are ways to extract the TOTP token via root (I have done this) but I'd like to give my physical key it
polhenarejos commented 2025-10-05 06:49:04 +08:00 (Migrated from github.com)
Copy Link

Is there an app to program the TOTP with this "steam" flag?

Is there an app to program the TOTP with this "steam" flag?
Hellscaped commented 2025-10-05 07:40:25 +08:00 (Migrated from github.com)
Copy Link

Is there an app to program the TOTP with this "steam" flag?

I don't understand what you mean but there are implementations of steam's modified algo:
https://github.com/DoctorMcKay/node-steam-totp

They use a different alphabet and hash I believe so its not directly compatible with TOTP

> Is there an app to program the TOTP with this "steam" flag? I don't understand what you mean but there are implementations of steam's modified algo: https://github.com/DoctorMcKay/node-steam-totp They use a different alphabet and hash I believe so its not directly compatible with TOTP
polhenarejos commented 2025-10-05 08:04:21 +08:00 (Migrated from github.com)
Copy Link

You need an app to configure your board, which will send the secret key and tell the board "provide me with a Steam TOTP". Which app you'll use? Yubico Authenticator is widely used, but it doesn't support Steam. So, which other app do you plan to use?

You need an app to configure your board, which will send the secret key and tell the board "provide me with a Steam TOTP". Which app you'll use? Yubico Authenticator is widely used, but it doesn't support Steam. So, which other app do you plan to use?
Hellscaped commented 2025-10-05 09:07:16 +08:00 (Migrated from github.com)
Copy Link

You need an app to configure your board, which will send the secret key and tell the board "provide me with a Steam TOTP". Which app you'll use? Yubico Authenticator is widely used, but it doesn't support Steam. So, which other app do you plan to use?

Thats... a good question
I can probably write a small program that detects when my key is inserted and asks for the Steam TOTP.. (and lets me put it onto the board)
I should've expected that I'd need some kind of helper program to actually tell steam the token

> You need an app to configure your board, which will send the secret key and tell the board "provide me with a Steam TOTP". Which app you'll use? Yubico Authenticator is widely used, but it doesn't support Steam. So, which other app do you plan to use? Thats... a good question I can probably write a small program that detects when my key is inserted and asks for the Steam TOTP.. (and lets me put it onto the board) I should've expected that I'd need some kind of helper program to actually tell steam the token
zyp114514 commented 2026-02-14 01:29:26 +08:00 (Migrated from github.com)
Copy Link

Steam uses their own algorithm to implement TOTP, not the standard HOTP.

Steam uses their own algorithm to implement TOTP, not the standard HOTP.
Hellscaped commented 2026-02-14 05:48:16 +08:00 (Migrated from github.com)
Copy Link

Steam uses their own algorithm to implement TOTP, not the standard HOTP.

Actually iirc they just use a different output (letters instead of numbers) that is mapped differently

> Steam uses their own algorithm to implement TOTP, not the standard HOTP. Actually iirc they just use a different output (letters instead of numbers) that is mapped differently
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
Something isn't working
 documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 question
Further information is requested
 wontfix
This will not be worked on
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
dearsky
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dearsky/pico-fido#190
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?