// the find
dyc3/steamguard-cli
A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.
steamguard-cli is a Rust command-line tool for managing Steam's mobile 2FA without a phone. It generates TOTP codes, handles trade and market confirmations, and reads the maFiles format used by Steam Desktop Authenticator. Aimed at Linux users who automate Steam workflows or just don't want to reach for their phone to approve a trade.
Uses official Steam APIs where possible rather than scraping, which makes it materially less likely to break on Steam updates. The library crate is split out and dual-licensed MIT/Apache-2.0, so you can embed it in your own tooling without the GPL infection. Memory-clearing data structures for 2FA secrets is a thoughtful detail — secrets don't linger in heap dumps. Compat test fixtures cover a wide range of messy real-world maFile states (null fields, missing fields, old manifest versions), which suggests the migration path from SDA actually works.
Still self-described as beta, and the disclaimer is not casual — if you lose your maFiles and your revocation code, you lose your Steam account, full stop. The QR login feature is undocumented beyond a single paragraph, and the docs/ directory has exactly one file (quickstart.md), so you're reading source for anything non-trivial. Windows support exists in the file-path logic but there's no CI for it and no mention of testing on Windows. The AUR checker CI is a good sign for Arch users, but anyone on Debian or Fedora is on their own with the shell packaging script.