How to recover your hacked Steam account step by step (2026)

If you landed on this article it’s because you just discovered someone got into your Steam account. Maybe you see games changed to a different country, products sold on the Market, inventory items missing, or Steam outright telling you “your password has been changed”. Breathe: it’s almost always recoverable, but you need to act fast.

This is the real step-by-step guide, written assuming you’re in panic mode. Every minute counts — hackers empty accounts in under 30 minutes.

First (do this NOW, before reading anything else)

1. Change your email password (Gmail/Outlook/etc.) linked to Steam.

Why email first: if your Steam was hacked, the most likely path is that the hacker entered your email first and from there requested a Steam password reset. If you don’t secure the email, nothing else matters — they’ll get back in.

Also enable 2FA on the email (Google Authenticator, not SMS). This alone: 2 minutes. Do it now.

2. Once email is secured, go to help.steampowered.com.

Step 1 — Lock your account immediately

Steam has an explicit button: “My account has been compromised”. Click there.

They offer a temporary lockdown — this kicks the hacker out of their current session and blocks any transaction. Although your access is also blocked for a few hours, this is the right call: it stops the bleeding.

Don’t try to “log in first to see if you still can”. Every passing minute the hacker is emptying your inventory or selling skins/cards.

Step 2 — Recover access

After the lockdown, Steam asks you to verify your identity. This works in a few ways:

If you still have email access:

1. Reset password via “Forgot my password” on login.steampowered.com
2. You receive an email with a code → enter it
3. Reset password → choose a unique, long, never-reused-elsewhere one

If the hacker changed the email (worst case):

1. You need to contact Support directly with proof of ownership
2. Valid proof: screenshot of your CIF/invoice from the first game purchase, PayPal/card receipt, screenshots of old Support tickets
3. The more recent and detailed the proof, the faster they return it (24-72h normally)

Step 3 — Audit damages

Once recovered, audit EVERYTHING immediately:

What to check	Where
Linked email	Settings → Account → Change email (must be yours)
Phone number	Settings → Account (must be yours)
Active sessions	Settings → Security → “Sign out everywhere else”
Inventory items	Inventory → check for missing
Market: active offers	Market → “My listings” — cancel any suspicious sale
Pending Trade Offers	Inventory → “Trade Offers” — reject anything you don’t recognise
API key	steamcommunity.com/dev/apikey — revoke any active key (hackers use them to drain inventories automatically)

Step 4 — Block future damage

Enable Steam Guard Mobile Authenticator (if you didn’t have it):

1. Download the Steam Mobile app
2. Sign in
3. Enable the authenticator → it gives you a recovery code
4. Write the recovery code on paper and store it (not on the phone, not in a digital note)

From here on, every login requires the phone code. Without your phone, nobody enters. Total lockdown.

Change passwords for:

• Main email
• Steam
• Any service tied to it (Discord linked to Steam, etc.)

Use a password manager (Bitwarden free, 1Password, etc.) — generate unique 20+ character passwords per site.

Why you got hacked? Common causes (so it doesn’t repeat)

Cause	How to avoid
Phishing (“You won a free skin, log in here”)	Never log in from chat/email links. Only from steam.com typed directly
Password reuse (same as your email/Twitter)	Unique password per site + manager
Email hacked first	2FA on email, mandatory
Fake trade scams (“I’ll buy this skin from you, give me your API key”)	Never give your API key to anyone. EVER.
Cracks/cheats downloaded	Don’t download pirate software for online games

What Steam WON’T do for you

Be realistic about expectations:

• ✗ They won’t refund money the hacker spent (Steam Wallet purchases by the hacker, Market transactions)
• ✗ They won’t return skins/items once transferred to another account (unless you prove it with clear, fast screenshots)
• ✓ They WILL return account access (games, library)
• ✓ They WILL ban the hacker’s account if clearly identified

Games aren’t lost. Virtual items mostly are. That’s why prevention > recovery.

How long does Steam Support take

With clear ownership proof: 24-72h normally. Without proof: 1-3 weeks of back and forth.

While you wait for their response:

• Don’t open a new ticket every day — Support works FIFO and reopening pushes you to the back of the queue
• Do reply to their messages with the info they ask for
• Be clear and respectful (don’t insult — slows things down)

An uncomfortable note: the account you recover isn’t quite the same

Even after regaining access, Steam can apply protective restrictions for a while:

• You can’t sell on Market for 1-3 months
• You can’t make trade offers for 1-3 months
• Restrictions on gifting

This is to prevent the hacker, if they get back in, from monetising. It’s annoying but it’s what protects your games long-term. Bear with it.

Conclusion

Recovering a hacked account is annoying but rarely impossible. What IS impossible is recovering what the hacker already sold or transferred — that’s why those first 30 minutes matter so much. If you got here in time, follow the steps in order and you’ll recover most of it.

And please, after this, enable Steam Guard Mobile and stop using the same password on 12 sites.

Back to the comparator →