# Security Timeline — The Steam Dossier

> Timeline of Valve security incidents, policy updates and enforcement actions from 2018 to 2026, with evidential grading.

Canonical: https://phishdestroy.io/steam_dossier/security_timeline
Language: en
Publisher: PhishDestroy
Author: PhishDestroy Team

This file describes the published investigation page. The full text preserves its arguments, figures, tables, qualifications and source links. Cite the canonical page and the relevant section.

## Reading

- [Published page](https://phishdestroy.io/steam_dossier/security_timeline)
- [Complete Markdown](https://phishdestroy.io/steam_dossier/security_timeline.html.md)
- [Complete plain-text version](https://phishdestroy.io/steam_dossier/security_timeline/llms-full.txt)
- [Investigation index](https://phishdestroy.io/steam_dossier/llms.txt)

## Sections

- [The chronology](https://phishdestroy.io/steam_dossier/security_timeline#timeline)
- [Suspicious-message warnings in group chats](https://phishdestroy.io/steam_dossier/security_timeline#event-2026-09-01)
- [Granular permissions & IP whitelisting for Publisher Keys (Valve announcement)](https://phishdestroy.io/steam_dossier/security_timeline#event-2026-01-16)
- [CS2 trades gain a seven-day reversal window](https://phishdestroy.io/steam_dossier/security_timeline#event-2025-07-15)
- [Valve publishes account security warning regarding SMS leaks](https://phishdestroy.io/steam_dossier/security_timeline#event-2025-05-14)
- [Seven days before re-trading or re-marketing](https://phishdestroy.io/steam_dossier/security_timeline#event-2024-10-02)
- [New-device restrictions verified on Help Pages](https://phishdestroy.io/steam_dossier/security_timeline#event-2024-09-18)
- [Name-change trade cooldown implemented in 2024](https://phishdestroy.io/steam_dossier/security_timeline#event-2024-02-14)
- [Key creation requires mobile confirmation](https://phishdestroy.io/steam_dossier/security_timeline#event-2023-12-04)
- [Mandatory 2FA for setting game builds live goes effective](https://phishdestroy.io/steam_dossier/security_timeline#event-2023-10-24)
- [Custom biography content warnings observed by community](https://phishdestroy.io/steam_dossier/security_timeline#event-2023-07-12)
- [Profile link filtering and editing cooldowns active](https://phishdestroy.io/steam_dossier/security_timeline#event-2023-01-25)
- [Steam Client transition to OAuth refresh and access tokens](https://phishdestroy.io/steam_dossier/security_timeline#event-2022-10-24)
- [QR sign-in and authorized-device management](https://phishdestroy.io/steam_dossier/security_timeline#event-2022-10-12)
- [Trade cancellation endpoints removed from public API list](https://phishdestroy.io/steam_dossier/security_timeline#event-2022-05-10)
- [Dota 2 items receive a seven-day trading cooldown](https://phishdestroy.io/steam_dossier/security_timeline#event-2020-05-25)
- [Traded CS:GO items receive a seven-day cooldown](https://phishdestroy.io/steam_dossier/security_timeline#event-2018-03-29)
- [No matching entries.](https://phishdestroy.io/steam_dossier/security_timeline#tl-empty)