FiveM retires Steam Web API keys: servers need build 38004 and sv_enforceSteamAuth
Cfx.re changed how FiveM and RedM servers verify Steam identities on 4 November, and the old steam_webApiKey setting no longer does anything. Servers that rely on Steam IDs must update their FXServer artifact and switch to the new sv_enforceSteamAuth option, while some players are still hitting…
On 4 November 2026, Cfx.re switched off the old way FiveM and RedM servers read Steam identities. The steam_webApiKey setting no longer works, so any server that depends on Steam IDs now has to run FXServer build 38004 or later and use the new sv_enforceSteamAuth variable.
For years, servers that wanted a player's Steam identifier set a Steam Web API key in their configuration. That method is now officially retired. The Cfx.re server documentation marks steam_webApiKey as deprecated and states plainly that, from 4 November, it no longer works and has no effect.
What changed on 4 November
The replacement is a single on-or-off server variable. When it is turned on, Steam linking moves from the server's configuration to the player's Cfx account, and the server checks that the link exists before letting anyone in.
- steam_webApiKey: deprecated and no longer has any effect as of 4 November 2026.
- sv_enforceSteamAuth: new boolean variable, false by default. When set to true, players must have a Steam account linked to their Cfx account to join.
- Minimum version: sv_enforceSteamAuth requires server version 38004 or later.
- Player flow: linking now happens through a Steam sign-in window before the player reaches the server, so server-side resources do not handle it.
Why it matters for server owners
Steam identifiers sit at the heart of many communities. Whitelists, ban lists, VIP perks and ACE permissions written against identifier.steam: all assume the server can see a player's Steam ID. If it cannot, players may be turned away at the door or lose access to roles and permissions they already had.
Many owners will miss one important detail: updating txAdmin does not update the server itself. txAdmin can be completely up to date while the FXServer artifact underneath is still older than 38004. Check the artifact build number directly. Servers running FiveM for GTAV Enhanced, which uses the separate Cfx Server binaries, should move to the current build through their usual artifact channel.
How to set it up
- Check your FXServer artifact build and update it if it is below 38004.
- Add set sv_enforceSteamAuth true to your server configuration if your server requires Steam.
- Do not copy an old steam_webApiKey setup onto new servers, as it no longer does anything.
- Test with a real Steam-linked account and confirm that identifiers resolve correctly in your framework, whitelist, ban system and permissions.
- Keep a backup and a known-good build so you can roll back if something breaks.
What players will notice
Players joining a server that requires Steam may now see a prompt asking them to link their Steam account to their FiveM or RedM account before connecting. It only needs to be done once. Keep the client updated, make sure Steam is open and logged in, and finish the sign-in window when it appears.
Teething problems in the first days
| Setting | Status | What it does |
|---|---|---|
| steam_webApiKey | Deprecated, no effect | Previously let the server retrieve Steam identifiers with a Web API key |
| sv_enforceSteamAuth | New, default false | When true, players must link Steam to their Cfx account to join |
| FXServer build | 38004 or later required | Needed to use sv_enforceSteamAuth |
Frequently asked questions
Does every FiveM server need to change something?
Only servers that rely on Steam identifiers, for example for whitelists, bans or ACE permissions using identifier.steam:. Those servers need FXServer build 38004 or later and should enable sv_enforceSteamAuth, because steam_webApiKey no longer has any effect.
I updated txAdmin. Is that enough?
No. txAdmin can be current while the FXServer artifact underneath is older than 38004. Check the artifact build itself and update it.
Why can't I join a Steam-required server even though Steam is open?
Many reports point to servers still running older artifacts that expect the old Steam ticket, which players cannot fix themselves. Ask the server staff to update. Some owners report that build 38317 solved it, but no official fix has been confirmed for every case.
Do I have to link my Steam account every time I connect?
No. You link your Steam account to your Cfx account through a sign-in window, and server owners in the support threads describe it as a one-time step.