You set up your new phone, restored your apps, and every two-factor account came across fine. Except Steam. There are no Steam Guard codes on the new device, your old phone is still the one Steam trusts, and nothing about the process looks like the migration you just did for everything else.
That's not a mistake on your end. Steam Guard is deliberately different from normal two-factor authentication, and the way you move it to a new phone has almost nothing in common with moving a regular authenticator account. This guide explains what makes it different, the safe order of operations, and what to do if the old phone is already gone.
Why Steam Guard doesn't transfer like other 2FA
Most services use standard TOTP: they show you a QR code, you scan it into any authenticator app, and the app generates six-digit codes from a shared secret. Because the secret is portable, those accounts are easy to move or sync between devices.
Steam Guard Mobile Authenticator is not that. It's Valve's proprietary system, built directly into the Steam mobile app. There is no QR code you can scan into Google Authenticator, Authy, or our own app, and the codes it produces don't even look like normal TOTP codes. The authenticator is tied to your Steam account through the Steam app itself, not through a portable secret you control.
To be direct about it: no third-party authenticator app can hold your Steam Guard codes, ours included. Unofficial tools exist that extract Steam's secrets, but they sit outside what Valve supports, and if something goes wrong you're relying on Steam Support to untangle it. For an account holding your game library, that's a poor trade.
The practical consequence is simple: moving Steam Guard means moving the Steam app, not moving an authenticator entry.
The short version
If you remember one thing, make it this: you don't transfer Steam Guard, you re-enable it. Install the Steam app on the new phone, sign in to your account, and set up the mobile authenticator again on that device. Steam ties the authenticator to one phone at a time, so enrolling the new device is the whole job.
The exact screens change as Valve updates the app, so this guide sticks to the flow rather than tap-by-tap instructions. When you want the current official steps, Steam Support's help pages on the Mobile Authenticator are the source to trust, and they're kept up to date in a way no blog post can match.
Before you switch: what to have ready
Steam Guard migrations go wrong in one specific way: people wipe the old phone first and only then discover the new one can't verify anything. Five minutes of preparation removes that risk almost entirely.
- Your recovery code. Steam shows you a recovery code when you first set up the mobile authenticator. If you saved it, confirm you can still find it. It's your path back in if both phones fail you. If you've lost track of it, our guide to managing 2FA recovery codes covers how to store these properly going forward.
- Your phone number. Steam can use the number linked to your account to verify authenticator changes by SMS. Check that the number on file is one you still control, especially if you're changing carriers or SIM cards along with the phone. And remember that SMS is a fallback, not a fortress: it's the channel SIM-swap attacks target.
- Your email login. Steam falls back to email verification when a mobile authenticator isn't active. Make sure you can open that inbox from somewhere other than the old phone.
- Your Steam password. Obvious, but if your password manager only lives on the old phone, sort that out first.
Moving while you still have the old phone
This is the easy path, and it's worth doing before you trade in or wipe the old device.
- Keep the old phone active. Don't factory-reset it until the new phone is confirmed working. The old device can approve the sign-in on the new one and saves you from every fallback flow.
- Install Steam on the new phone and sign in. Approve the login using the old phone or whatever verification Steam requests.
- Set up Steam Guard on the new device. In the app's Steam Guard area, follow the prompts to make the new phone your authenticator. Steam walks you through moving it, including any phone number verification it needs.
- Confirm codes work. Sign in to Steam somewhere else, a browser or your desktop client, and check that the new phone is the one generating codes and approving logins.
- Save the new recovery code if Steam issues one, then sign out of Steam on the old phone.
Only after that last confirmation should the old phone get wiped.
If the old phone is already gone
Lost, stolen, traded in, or wiped: you can still recover, it just takes longer.
Your recovery code is the best tool here. It lets you remove the old authenticator from your account so you can set up fresh on the new phone. If you don't have the recovery code, SMS verification to your linked phone number is the next option. If you've lost the phone number too, you're into Steam Support's account recovery process, where you'll need to prove ownership, typically with things like purchase history or payment details. It works, but it's measured in days rather than minutes, which is exactly why the preparation section above exists. The same logic applies to every account you own, and it's the core of avoiding account lockout generally: recovery paths are only useful if you set them up before you need them.
Trade restrictions: expect them, don't fear them
Here's the part that surprises people. Steam applies temporary restrictions on trading and Community Market activity after certain authenticator changes, particularly removing the authenticator or recovering an account without one. This is real Steam policy, not a glitch, and it exists to stop a hijacker from draining a stolen account's inventory before the owner notices.
The restrictions are temporary and lift on their own. But if you trade actively or sell on the Market, time your phone migration accordingly: don't remove your authenticator the day before you plan a big trade. Moving the authenticator cleanly from old device to new is generally gentler than removing it entirely and re-adding it later, which is another reason to do the migration while both phones are in hand. For current specifics on what triggers restrictions, check Steam Support directly; the details are Valve's to define and they adjust them over time.
Your other accounts are the easy part
Steam is the exception, not the rule. Everything else on your phone that uses standard TOTP, from email to banking to most other game launchers, migrates through a completely different and much friendlier process, which we've covered in our full guide to moving your authenticator to a new phone.
For those accounts, an authenticator with end-to-end encrypted sync removes the migration problem entirely: with Authenticator by Vidus6, your existing trusted device approves the new phone and your codes appear there, with the encryption key never leaving your own hardware. Steam Guard will always live in the Steam app, but the other forty accounts don't have to be a chore every time you upgrade.
Battle.net players face a similar situation to Steam, with its own quirks; see our guide to moving the Battle.net authenticator to a new phone.
Can I put Steam Guard in Google Authenticator or another 2FA app?
Not through any supported method. Steam Guard is proprietary and only runs inside the official Steam mobile app. Unofficial extraction tools exist, but they're unsupported by Valve and put your account's standing and recoverability at risk.
Will moving phones get me trade banned?
No. A ban and a temporary trade restriction are different things. Authenticator changes can trigger a temporary hold on trading and Market activity as an anti-hijacking measure, and it expires on its own. Your account standing isn't affected.
Do I need my old phone to move Steam Guard?
No, but it makes everything faster. With the old phone you approve the new device directly. Without it, you'll need your recovery code, your linked phone number, or in the worst case Steam Support's recovery process.
The bottom line: treat Steam Guard as part of the Steam app, not part of your authenticator. Move it while both phones work, keep the recovery code somewhere safe, expect a possible trading pause, and save the clever migration tools for the accounts that actually support them.
