Correct way of enabling 2FA

[يودا]

I can see that SteamUser provides enableTwoFactor and finalizeTwoFactor methods but there is also an example on node-steamcommunity (enable_twofactor.js) using the method enableTwoFactor that seems to do the same thing.

What's the current correct way of enabling Steam Guard 2FA?

Update: From what I understood node-steamcommunity uses now node-steam-session internally to process the login mechanism. Since I wish to use proxies, is steam-user better to enable the 2FA?

Edited August 3 by يودا

[Dr. McKay]

Either works, but using steamcommunity is "better" since it more closely mimics how the official mobile app works. steam-user just happens to work but may break at any time (though it's been working since 2FA came out, so seems pretty unlikely that it'll break).

[TheMaster]

13 hours ago, يودا said:

I can see that SteamUser provides enableTwoFactor and finalizeTwoFactor methods but there is also an example on node-steamcommunity (enable_twofactor.js) using the method enableTwoFactor that seems to do the same thing.

What's the current correct way of enabling Steam Guard 2FA?

Update: From what I understood node-steamcommunity uses now node-steam-session internally to process the login mechanism. Since I wish to use proxies, is steam-user better to enable the 2FA?

u can just add the proxies in the constructors of steam user and steamcommunity its that simple

[يودا]

12 hours ago, Dr. McKay said:

Either works, but using steamcommunity is "better" since it more closely mimics how the official mobile app works. steam-user just happens to work but may break at any time (though it's been working since 2FA came out, so seems pretty unlikely that it'll break).

Sweet. I've been testing both of them and both seem to do the job well. But as you said, since it closely mimics the real use case scenario, I'll stick with steamcommunity.

Another question, is there any way of checking if an account has Steam Guard mobile enabled? I noticed that the variable timestampTwoFactorEnabled is null whenever the account doesn't have Steam Guard enabled, but I'm not sure if it is reliable since it maybe turns not null when the account has Steam Guard via email (?).

My goal would be to attempt to login into the account and prompt the user to enable 2FA mobile if the account doesn't have it. 

Thanks in advance.

[Dr. McKay]

I haven't tested it in years, but timestampTwoFactorEnabled should be non-null if you have mobile 2FA enabled.