about steam password

panikas · **Joined:** 24 Nov 2009 16:39 **Posts:** 1

hi luigi.i just wanted to ask.even though steam has a new way of storing passwords, do you think its still possible to obtain the password if you are already logged in into the account?i mean if you log in to an account which had the save password option but you dont know the password.thnx in advance.

Sethioz · **Posted:** 24 Nov 2009 22:42

i guess it goes into trash, some ppl just seem too stupid to understand :)

Quote:

in Steam beta only the sha1 hash of the password is saved

this is quote from Luigi's post.
panikas do you understand what is sha1 hash ? if not then read about SHA1 <

this means that if you want the password, you need to crack sha1 hash.
cracking is NOT recovering. it means you need to collide it with correct password.
so only way is to use bruteforce or wordlist attack (maybe some lookup tables too).
that is not recovering anymore, but cracking.

Offtopic: obviously only reason why somebody wants to "recover" a password, is that he/she wants to steal somebody's steam account (most likely his/her friend's account). because if it is your own account, you can always use the reset password. so you are lame bastard if you try to scam your own friends.
anyways, i dont judge. if you are able to get sha1 hash of your victim. then i think that it is possible to use it to login to your victim's account and maybe even change password.
thats in case if steam uses sha1 to send passwords ofcourse (which should be obvious that it sends it).
since this is not a hacking forum, i will not include any details. also it is only theory (based on experience out of other things and logic), because i have never done any research on steam on my own.

aluigi · **Posted:** 26 Nov 2009 18:14

/steam-password-decoder-will-soon-not-be-working-t1087.html
I would like to avoid to repeat the same things again and again and again

Sethioz · **Posted:** 27 Nov 2009 22:21

sry about the confusion. i did not focus on it, because it is senseless.
ppl only use this to steal "friends" accounts anyways. and thats lame. ..so was/im not interested in that at all.

as Luigi told me yesterday it is not sha1 hash, it just looked like sha1.
i just wanted to correct this or some noob starts calling me by names.
however it won't change what i wrote. you need to get the hash and crack it.
recovering and cracking are NOT same things.
just lock it Luigi.

sythe179 · **Joined:** 24 Jun 2010 13:37 **Posts:** 3

i dont know if this means anything, but i was looking around the files of steam, and i came across an encryption key.
"mary had a little lamb"
i dont know if that means anything or not, but id thought id throw it out there.

Luigi Auriemma

about steam password