this post was submitted on 14 May 2025
24 points (78.6% liked)

Steam

669 readers
1 users here now

For Steam Game Stuff

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Showroom7561@lemmy.ca 1 points 2 months ago (1 children)

It depends. If your accounts are set up to auto-reject and ban people after X number of failed logins, then a strong password (even without 2fa) should be ok for most people.

But if the service allows for unlimited login attempts, having the same password for months or years gives more time to brute force guess it.

Even in a leak like this, even without anything more than a list of passwords, it could be a valuable collection for a "dictionary password attack".

[–] SketchySeaBeast@lemmy.ca 1 points 2 months ago (1 children)

But why would the passwords be available unhashed?

[–] Showroom7561@lemmy.ca 1 points 2 months ago

Lots of unknowns, but this was a "leak", rather than a "hack". Perhaps another article might shed more light into the details of the data, and in what form those passwords are in.