Hacker News Reader

Doesn't the steam mobile app provide access codes?

It does

How does that one authenticate itself then?

(NOTE: I didn't even know the PC gaming service steam had a mobile app ;))

Well in the scenario where you lose access to your email address you would theoretically still have access to your phone with the steam app already installed and authenticated

For me, when I download Steam Authenticator it's tied to my phone number so the first time I login it will send me a text message code, and then from there it generates the authenticator codes in app

To be precise they've implemented their own version of TOTP.

However, near as I can figure, it offers no way to provision a second device with the same seed (or store the seed).

It's one of two sites that I use TFA for that I don't have a backup for, which is mildly annoying. I do have recovery codes, and will all too happily fall back on SMS.

Reply on news.ycombinator.com