Tips to Keep your Steem Account Safe - Permission Keys and Master Password

in #blog6 years ago (edited)


When we browse the internet we are constantly exposing ourselves, so security should be our priority, especially when there is money involved. In this post we will learn how to keep our Steemit account safe, taking really simple but effective actions.


Each Steemit account is assigned 4 permission keys, which are generated at the time of the creation of the account. Each of these keys has its functions and limitations in particular.


Posting Key: This key allows you to post, comment, vote and follow other accounts, while restricting the user from moving the funds of the account or making any movement in the internal market. This key doesn't allow the modification of any key.

Owner Key: This is the most important permission key, since it gives the user full control over the account, allowing him to post, vote, transfer funds, vote for witness and change the permission keys (including the owner key itself).

Active Key: This key can do almost all the same actions as the owner key, except change the owner key as such. However, it allows you to change the other permission keys, transfer funds and all the other actions that the owner key allows.

Memo Key: This key allows decrypting private messages sent to your account. To encrypt a message you must simply add a # before the text of the memo. This way only you and the recipient can see the content of the message.

Where can I see my permission keys?

Enter your Wallet and click on Permissions:


Next, the four public permission keys of your account will be displayed. To be able to see the actual keys (private) you must click on show private key.


You will have noticed in the image and in your own wallet that the owner key doesn't have the option to be revealed, this is because the Steemit UI doesn't longer shows it for security reasons.

Master Password. The Password to rule them all..



This is your original password to log in to Steemit. This password provides full control over the account, allowing you to do any of the actions of all the permission keys.

It is very important to keep your Master Password and your Owner Key protected. If someone obtains one of these two keys it would allow them to have total control over your account, which means that they could have control over your funds and also change everything, restricting the access to your own account.

How to protect my Master Password and Owner Key?


1.Keep them offline and NEVER use them to access your account, unless you need to change your owner key.

2.Instead use the active key, but only when necessary, that is when you need to do any of these actions:

  • Make transfers.
  • Use the internal market
  • Change the other permission keys.
  • Vote for a witness.
  • Power up / power down.

3.For the most common actions such as posting, commenting, voting and following other users you can login with your Posting Key.

4.When using third-party services, be sure to check what type of key they ask you for. You should only provide your Posting Key, allowing them to interact with your account but without giving them full access. Sometimes it is necessary to enter your private key, in which case I recommend doing it only in services that use Steemconnect.

5.Make backup copies! Save your passwords in different places both digitally (preferably encrypted) in several devices to protect you from hardware failures, as well as paper, as an extra measure of security.


Images: Screen, Frodo, Icons, Screenshots.

Sort:  

Congratulations! This post has been upvoted from the communal account, @minnowsupport, by angelgarz from the Minnow Support Project. It's a witness project run by aggroed, ausbitbank, teamsteem, theprophet0, someguy123, neoxian, followbtcnews, and netuoso. The goal is to help Steemit grow by supporting Minnows. Please find us at the Peace, Abundance, and Liberty Network (PALnet) Discord Channel. It's a completely public and open space to all members of the Steemit community who voluntarily choose to be there.

If you would like to delegate to the Minnow Support Project you can do so by clicking on the following links: 50SP, 100SP, 250SP, 500SP, 1000SP, 5000SP.
Be sure to leave at least 50SP undelegated on your account.

Coin Marketplace

STEEM 0.17
TRX 0.13
JST 0.027
BTC 58734.46
ETH 2636.20
USDT 1.00
SBD 2.43