Windows desktop app for Steam session login via refresh token (ConnectCache)

Go · Wails v3 · Svelte 5 · SQLite

Features

• Login with login----token (marketplace multi-segment keys supported)
• Saved accounts in local SQLite (accounts.db) with expiry display
• Import one key from the field, or bulk import from a .txt file (login----token per line)
• Export selected / all / per-row → clipboard, file, or Google Drive
• Drag-select accounts (paint checkboxes with the mouse)
• Account info panel: avatar, persona, level, games, friends, wallet, VAC / trade ban / limited, visibility, online state
• Harvest accounts already logged into Steam on this PC (ConnectCache scan)
• Light theme (auto / dark / light) and Simple / Advanced UI modes
• Logs and System status panels (Steam state, install path, Steam API reachability)
• Optional keep other Steam logins (surgical ConnectCache / loginusers merge)
• RU / EN UI (system language + Settings)
• Settings: language, Steam options, Google Drive OAuth, updates, Reset Steam
• Native success/error dialogs
• Update checker (GitHub Releases) + one-click install/restart
• Markdown release notes in the update dialog
• Reset Steam (config / userdata)
• Runs elevated for config writes; starts Steam unelevated
• Single native NFA-Tool-Recode-v2.exe

Bulk token checker (alpha)

• Proof logon against Steam CM over WebSocket — the refresh token is not consumed or rotated
• Bulk-check pasted keys or all saved accounts, with proxy support (http / https / socks5, one per line) and exportable results
• Alpha, and was never planned — it was built at the request of an NFA account shop owner. Expect rough edges; Steam rate-limits checks, so use proxies for large lists

Requirements

OS	Windows 10/11 x64
Steam	Installed; open Steam once so config.vdf + loginusers.vdf exist
Build	Go 1.26+, Node 22+, Wails v3 CLI

go install github.com/wailsapp/wails/v3/cmd/wails3@latest

Build (production)

git clone https://github.com/NeonFast/NFA-Tool.git
cd NFA-Tool
wails3 build

Output: bin\NFA-Tool-Recode-v2.exe

Dev:

wails3 dev

Auto releases (GitHub Actions)

1. Bump AppVersion in appservice.go (and build/config.yml / info.json) to match the tag.
2. Commit & push main.
3. Tag and push:

git tag v3.0.0
git push origin v3.0.0

GitHub Actions (.github/workflows/release.yml) builds Windows exe and publishes a Release with
NFA-Tool-Recode-v2-windows-amd64.exe + SHA256SUMS.txt.

Pushes/PRs to main also run .github/workflows/windows-build.yml (artifact only).

Usage

1. Run as Administrator.
2. Open Steam once on this PC if you never did, then close it.
3. Paste a key: login----token → Login (or Import to save only).
4. Bulk: Import from file… — same format as export (login----token lines).
5. Export: select accounts (click or drag) → Export → clipboard / file / Google Drive.
6. Google Drive: Settings → configure OAuth once (see in-app guide), then pick Drive on export.
7. Bulk check (alpha): paste keys or check saved accounts → results per line, optional proxies, export.
8. Full Steam guide: https://teletype.in/@hackerdlc/CS2NFA

Optional: Keep other Steam accounts — previous Steam logins stay available.

Project layout

main.go / appservice.go
cmd/ (cmharvest, cmprobe — dev utilities)
internal/steam/
internal/token/
internal/storage/
internal/gdrive/
internal/update/
frontend/
build/
.github/workflows/

Security

• Tokens in accounts.db are DPAPI-encrypted (Windows user + app entropy). Stealing the file alone is not enough.
• Same-user malware can still decrypt — this is not antivirus.
• Google OAuth tokens are stored sealed next to the app (gdrive-token.sealed); client credentials in google-oauth.json.
• Hot-update from GitHub Releases (in-app).
• Do not commit DB files, OAuth secrets, or logs.
• Unofficial tool — use only with accounts/tokens you are allowed to use.

License

GPL-3.0 — see LICENSE.

Not affiliated with Valve / Steam.

See NOTICE.md for inspiration credits, AI note, and security.