Your Steam Trade URL Explained
Every peer-to-peer trade starts with a trade URL. It is the one thing you have to hand to a stranger before they can send you an offer, and because of that it is surrounded by more myths than any other part of Steam. This guide covers where the URL lives, what the two numbers inside it actually let someone do, and the one situation in which you should generate a new one.
Where to find it
- Open Steam (client or browser) and go to your Inventory.
- Click Trade Offers in the top right, then Who can send me Trade Offers?
- Scroll to Third-Party Sites. The box labelled Trade URL is what you need. Copy it whole; a truncated link returns an error on the other side.
The same page has a Create New URLbutton, which we will come back to, and the privacy setting that decides whether people who are not on your friends list can send you offers at all. If that setting is off, a trade URL will not help anyone reach you, which is the most common reason a first-time trader hears "your link does not work".
On P2Trades, you paste the URL once into your profile. Every listing you create then carries it, and traders who want to send an offer click through without asking you for it in the comments.
What is inside the link
A trade URL always has the same shape:
https://steamcommunity.com/tradeoffer/new/?partner=123456789&token=AbCdEfGh
- partner is your account ID in its short (32-bit) form. It is not a secret. Anyone who can see your profile can derive it from your SteamID, and every inventory tool on the internet already does.
- token is an eight-character key that proves the sender obtained the link from you. Steam only lets non-friends open a trade window with you if the token matches the one currently set on your account.
Nothing else is encoded. The link does not contain your session, your API key, or anything that can log in as you. It is an address, not a password.
Is it safe to share?
Yes, and you cannot trade without doing so. A trade URL allows exactly one thing: opening a trade offer to you. Every offer still lands in your Trade Offers inbox, still shows both sides of the swap, and still needs your confirmation on the Steam Mobile Authenticator before any item moves. Someone holding your link cannot take items, cannot see anything that is not already public on your profile, and cannot bypass the seven-day hold on items you recently bought.
The risk is not the link. The risk is what arrives through it. Scammers collect trade URLs from public listings so that their bots can send you offers that look like a deal you already agreed to, or offers with a subtly different item in the window. Our scam guide walks through the variants; the defence against all of them is the same, which is to read every item in the trade window before confirming, every time.
When to generate a new one
Create New URL invalidates the old token instantly. Offers already sitting in your inbox stay valid; new offers using the old link are rejected. Reset it when:
- You are getting a stream of junk or scam offers from accounts you never spoke to. They are working from an old copy of your link, often scraped from a Discord server or a listing that expired months ago.
- You gave the link to a site you no longer use or trust. This is the trading equivalent of changing the locks after lending out a key.
- You fell for an API-key phishing page. Resetting the trade URL is one of the three steps here, alongside revoking the API key and deauthorising all other devices. On its own it is not enough, because a stolen API key lets the attacker read and cancel your offers regardless of the token.
After a reset, update the URL anywhere you have posted it, including your P2Trades profile. Listings carrying the old token will silently stop receiving offers, and nobody tells the trader on the other side why.
Common problems and what they mean
- "This Trade URL is no longer valid." The owner reset their token. Ask them for the current link; do not assume the listing is dead.
- "You cannot trade with this user because they have a trade ban." Exactly what it says. See our guide to the three ban types before you go looking for a workaround, because there is none.
- The trade window opens but their inventory is empty. Either their inventory is private, or every item they own is on hold. Both are visible on the profile before you open the window.
- "You must have had Steam Guard enabled for 15 days." A new-device rule, not a link problem. Steam is telling the other person that their own account is not yet allowed to trade.
A habit worth building
Treat the trade URL as public and the trade window as private. Post the link freely, on your listings and wherever traders look, but never confirm an offer you did not read line by line. If you do those two things, the trade URL stops being a source of anxiety and becomes what it is: the fastest way for a good trade to reach you. When you are ready, browse the live listings and see how many already carry one.