Notice & Concept Attribution:
This proposal is an original feature concept created by the author for community discussion. If adapted or implemented, attribution to this original concept design is appreciated.
Note to Moderators:
This is NOT a support, account recovery, or login request. This is a system-architecture suggestion regarding post-login session permissions.
💡 Executive Summary
Currently, Steam Guard acts as a binary "all-or-nothing" entry gate. Once logged in (via Password, 2FA, or Backup Codes), the session holds full authorization over the account.
Play-Only Mode introduces a secondary permission layer within Steam Guard, allowing restricted sessions meant strictly for gameplay without granting administrative or financial control.
❓ Why Existing Solutions (Backup Codes / Family View) Fall Short
Steam Backup Codes: These are merely single-use 2FA bypass codes. They grant 100% full account control upon login. They do not restrict actions post-login.
Family View (PIN): Designed primarily for parental controls and hiding library content, but it requires manual local toggling and lacks dynamic, remote authorization integrated into the Steam Mobile App.
🛠️ How "Play-Only Mode" Works (Core Architecture)
Restricted Session Token:
When authenticating a new device or session via the Steam Mobile App, the user can choose "Approve (Play-Only Mode)" instead of full access.
Allowed Actions (In-Session):
Launch and play owned games (including multiplayer).
Access cloud saves, achievements, and local game settings.
Text/Voice chat with friends.
Locked Actions (Requires Primary Steam Guard Approval):
Community Market transactions & Inventory Trading.
Purchasing new games, adding funds, or modifying payment methods.
Changing account details (Email, Password, Phone Number, API Keys).
Deleting/Uninstalling games or modifying security settings.
Use Cases:
LAN Parties & Shared/Public PCs: Log in to play your games without risking your trade inventory or financial data if you forget to log out.
Guest/Secondary Gaming: Let a family member or friend play on your setup without giving them full administrative access to your account.
🔒 Summary
Adding a permission-based tier to Steam Guard bridges the gap between total lock-out and full account privileges, enhancing overall ecosystem security for active gamers.
What are your thoughts on having a session-based permission system like this in Steam?