RE: Vlog #19: Steempower is protecting many Steemians from emotional selling and hacks.
When you got to your wallet and click permissions you will see 3 keys. Posting, Active and Owner. (there is a button on the right 'show the private key').
The key that is displayed after you click that button is the one you should use to log in.
Explained
If you login to Steemit with your posting key. Then the only things you can do on Steemit is post and vote. You can't do anything else.
If you login to Steemit with your active key. You can do more. You can post and vote. But you can also transfer steem to another account, start a powerdown, buy steem on the internal markets.
If you login with your 'owner' key you can change all the keys including the owner key.
Without knowing the owner key you will never be able to login again into your account to change things. There is also nobody you can mail or ask to reset the key. It's vital that you keep this key secret.
So, if a hacker gets a hold on your posting key or active key nothing is lost. Because you can change them with your owner key. But if a hacker gets a hold of your owner key then he can change the owner key and you will never be able to recover your account.
If you want to be safe always login to Steemit with either your Posting or Active key. The owner key should be kept offline as much as possible.
I log in with the first generated password from steemit.com when they confirmed my account. Do you mean this is not safe and I should take copy of all keys , cold store them, log out ,and in again with the posting key? Is that what should I do , or I am still confused ?
Thanks for help @exyle
I would indeed recommend that you login with your username and your posting or active key. (after you click the button). If this gets hacked for some reason you can always change things with your owner key or with the password they send you.