It IS very confusing when you start... and you look at "permissions" and it seems like you have SIX passwords! "What does what?" I asked myself.
And it's not made easier by the fact that SteemConnect asks for different things, depending on which app/utility you are trying to access.
So yes, it's important to stay safe; thanks for the reminder!
Going to re-steem this.
=^..^=
Sorry to hear your brother-in-law lost some of his tokens...