Technical information about the maFile

Tip

This article is intended for advanced users.

---

Basic Steam Guard fields

A maFile is a JSON file that contains Steam Guard data.

Main fields:

• shared_secret
  Used to generate Steam Guard login codes
• identity_secret
  Used to confirm actions, trades, and sales
• revocation_code
  Code for removing Steam Guard from the account
• account_name
  Steam account login
• steamid
  Unique account identifier
• device_id
  Generated device identifier. Used when working with confirmations.

---

Additional Steam fields

The maFile may contain Steam service fields:

• serial_number
• server_time
• token_gid
• secret_1
• uri

These fields are either not used during normal operation, or their purpose is unknown.
NebulaAuth does not use them, and they do not affect account operation.

---

Session

The maFile may store the account session and authorization data.

NebulaAuth uses a modern session format, similar to the official Steam application:

• access_token — used to make requests
• refresh_token — used to extend the session without logging in again

If access_token is outdated, NebulaAuth automatically tries to refresh it through refresh_token.

If this is not possible, for example because the refresh token has expired, you will need to log into the account again.

Tip

Steam Desktop Authenticator, SDA, uses an older format: an encoded session token.

Because of this, sessions imported from SDA cannot be reused, and you need to log into each account once.

NebulaAuth fields

NebulaAuth adds its own fields:

• Proxy
  Proxy assigned to the account
• Group
  Account group
• DeviceName
  Phone model used for the mobile login, see Devices

These fields are used only inside NebulaAuth and are not part of the Steam Guard format.

With encryption on, maFiles are stored as .mafile.encrypted files, which only NebulaAuth can read.

---

❓ Frequently asked questions

Can I edit a maFile manually?

Technically, yes.

But it is not recommended, because an error in the file structure can make the file unusable.

It is better to use NebulaAuth tools.

Can I change the secrets, shared_secret, identity_secret?

No.

These values are created by Steam when the authenticator is linked.

To get new ones, you need to remove Steam Guard and link it again.