A User's Guide to the Different Steem Keys or Passwords

last year
72 in steemit-guides

cryptokey

Steem keys and passwords

Steem has five different keys or passwords associated with accounts. Four of these are used with typical accounts and the fifth is used by witnesses. They are: owner, active, posting, memo, and signing keys. Each has its own set of functions and limits.

keys

Quick reference table

posting key
active key
owner key
memo key
original 16+ character "master" password
post, comment, vote, follow
x
x
x
x
transfer funds, make trades, power up/down, change posting/memo/witness/active keys, vote for witnesses
x
x
x
change the owner key
x
x
view private messages
x
x

Owner key

The owner key gives full control over your Steem account. Its user is able to post, vote, transfer funds, vote for witnesses, and change all keys including being able to change the owner key. Notice I said "its user" and not "you"? Because if someone were to get your account or owner password, they can change all the keys and take your account and whatever it is worth for themselves. The owner key is meant to be used basically only if necessary, and otherwise written down/etched in stone and put into "cold storage," a crypto term for keeping your keys off of running or internet-connected computers. The only thing the owner key can not do is decrypt private messages/memos sent to you, only the memo key can.

Active key

The active key can perform almost all functions for an account except change the owner key. It can change all other keys on an account, including the active key. The active key can do everything the post key can do, plus allows transferring, trading, powering up/powering down Steem Power, and voting for witnesses. It cannot decrypt private messages encrypted to your memo key, though if you log in with the password you made when making an account via fb/reddit (don't, see below for why), both of these will be available simultaneously.

Posting key

The posting key allows accounts to post, comment, vote, and follow other accounts. This is what most users should be logging in to Steemit with every day, only using the active key when something to do with transferring funds or changing keys is necessary. You are more likely to have your password or key compromised the more you use it, so a limited posting key exists to limit the damage that a compromised account key would cause.

Memo key

The memo key is the only key that can decrypt private messages sent to your account. Before you ask, the feature isn't implemented on Steemit yet. :)

Signing key (super secret for witnesses only)

The signing key can be used by witnesses to sign blocks. It's set with the update_witness transaction signed using an active or owner key.

Facebook and Reddit verified account master passwords

You might be asking, "Keys, what keys? I only have the password I made when I signed up." The password you made when signing up via Facebook or Reddit actually generates all four main keys for your account. You can see this by going to your account's permissions page (https://steemit.com/@insertyouraccountname/permissions). You will be able to show any key including the owner key. This means you're logged into all of these keys at once. For daily non-transactional use you should be logging in with your posting key only. See the posting key link below for instructions.


Posts regarding changing keys:

How to login with your posting key (and why this is important)
How to use or make a secure enough posting key and switch to using it to log in.

Your Steem account is worth money! How to secure it with a new owner key to keep it yours forever
How to make a very secure owner key for cold storage.


If you found this or my other posts helpful, click here for my blog page and hit the follow button in the upper right!

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!
Sort Order:  trending
72
  ·  5 days ago

It's come to my attention that this post is being misused by @dineroconopcion to justify asking for people's private posting key.

I encourage all users to treat their accounts' permissions and keys with care. This goes for any third party you may provide your posting key to. If their key list is compromised:

  • your posts may be edited, defaced, or replaced with spam
  • someone could post or comment with spam, scams, or resteem anything
  • your vote power may be drained voting on things you don't want to vote on
  • your account may follow people you don't want to follow

Though it limits potential economic damage to your account, the private posting key is still a key that should be kept private.

·
47
  ·  4 days ago

thank for the advice @pfunk a have seen a lot of third parties asking for the private posting key

60
  ·  2 months ago

Hello pfunk sorry for disturb you on a post that is one year old.

Please I want to ask something.

If I change my password does that change private keys too? I would't really care about them that much, but I have seen that proctologic lost a lot by getting...hacked..probably.

I think a good way is to not risk it.

Thank you.

·
72
  ·  2 months ago

Yes, changing your password via Steemit will change your account's permission keys essentially. The keys are derived from a combination of your password and your account name.

If you believe your keys or password may be compromised, it is a very good idea to change the password, so long as you back it up and put the backups in secure and safe places, just like your original password.

·
·
54
  ·  2 months ago

I think that answers my question too then. There's no way to change the posting key (for example) without changing the password. Thanks.

·
·
·
72
  ·  2 months ago

You can do this with Steem accounts if you're a power-user type and aren't shy of a command line interface. With the steemit.com GUI, it's no longer possible.

Changing one key will make your original master password not function for that particular use, so if you used something other than Steemit to change just your posting key, the password would no longer allow you to post/comment/vote.

·
·
·
·
54
  ·  2 months ago

Oh thanks... that's interesting. I'll get into more of the details of the CLI and APIs soon I hope.

·
·
60
  ·  2 months ago

Thank you very much!

25
  ·  last month

Hello pfunk - First of all thank you for the post. I am new to Steemit , I dont see an option to see the owner private key. I can I see the owner private key so that I can backup the same. Thank you.

·
72
  ·  last month

Backup your master password which is used to derive your owner key.

steemit.com no longer shows the owner key.

·
·
42
  ·  last month

Which WIF key in permissions used for steem mining ? owner, active which one ??

·
·
·
72
  ·  last month

PoW mining in Steem is no longer possible.

·
·
·
·
42
  ·  last month

Ohh! Thank you :)

61
  ·  last year

We need to be able to pin posts to the top or create a topic of general user tools and options with only the best mmost straight forward organized posts, so people don't constantly ask about this stuff requiring new posts or to constantly be linking to old ones. Just my thoughts for the record I think this is great for new users and much needed.

·
72
  ·  last year

So far I've put these into the #steemit-guides tag. There's also #steemhelp.

58
  ·  last year

yeah this is very good for beginners, this information is very important that all users can navigate well with the functions of the features on their steemit account

55
  ·  last year

Good post I had no idea about the keys good information!

63
  ·  last year

This is really good info, thanks for posting.

It should be mandatory reading for any new users!

·
63
  ·  last year

karnal update account data (show details) 4 minutes ago
69a765ff Karnal karnal update account data (show details) 5 minutes ago
f78d3d7b Karnal karnal update account data (show details) 6 minutes ago
36a1157f Karnal karnal replied to @pfunk/a-user-s-guide-to-the-different-ste… 9 minutes ago

37
  ·  last year

It create what are the key and password ? Sorry I am new in here

35
  ·  last year

Thank you for informative article.

36
  ·  last year

Login to Active&Owner key are deactivated, Does anyone know why?

60
  ·  last year

@pfunk, Hi pfunk, can we change the password logging in from Facebook or Reddit? Maybe going through some verification for identity. I am worried what if I forget my password? Then I will lost my money here? Thank you.

·
72
  ·  last year

Bottom line is, back up your password well. I just wrote a guide going a little more into changing your owner key, and I have an older one about changing and using the posting key. See the bottom of this post for those links.

See also this post: https://steemit.com/bitcoin/@steempower/are-your-bitcoins-and-digital-asset-sufficiently-protected-backup-strategy-to-secure-seeds-databases-and-digital-files

47
  ·  last year

My keys are still not working, has anybody found a solution to this?
https://steemit.com/steem/@alkemix/steemit-password-and-private-key-mystery-share-your-how-to-now

59
  ·  4 months ago

This is the most confusing explanation ever.
Tell me - before proceeding, all the key are available by default.
Do I first need to change all the keys, before using or saving them?

·
·
·
54
  ·  2 months ago

This explanation has clearly explained the issue for me. I was also led to this article from a discussion on #teamaustralia Discord channel. Loving the fast response community on Steemit.

45
  ·  4 months ago

Well, that made a light shine. Thanks for the explanation.

·
72
  ·  4 months ago

You are welcome

39
  ·  3 months ago

I'm totally new, I just got into my account now. Thanks for explaining the keys - who woulda thought we get five for one? I'll go get the other four and store them securely, and log in with the Posting key. Much appreciated.

27
  ·  2 months ago

I dont get it... Where do I find my PRIVATE OWNER KEY? There is just a normal (public??) owner key.

·
72
  ·  2 months ago

This guide is outdated and the Steemit GUI has changed since I made it. Your account's master password contains your owner key, so be careful with it!

For advanced users who want to get their individual keys to use them individually, use @xeroc's paper wallet generator.

59
  ·  last year

Nice @pfunk. We've got lots of new users who need the 411 on Steem keys.

43
  ·  last month

So....know this is old, but still has folks discussing.

I want to transfer SBD from bittrex to my steem account. Not sure which key to use, as it seems I can use several. Then....do I use the standard key on my permissions page or the private key???

Don't wanna send stuff to the wrong place and lose it forever. Any help would be very appreciated fellow steemians.

·
72
  ·  last month

Enter your Steem account namestuntworksinc into the Address field in a withdrawal from Bittrex or Poloniex or any other exchange. Simple as that :)

·
·
43
  ·  last month

Thanks @pfunk (allstars) for the smoking fast reply.

Been looking around and finally found another guide. It mentions using the public memo key in the memo section on bittrex. Is that needed, or at least okay?

·
·
·
72
  ·  last month

I'm not sure where they got that idea. No memo is needed for exchange -> account.

Account -> exchange uses an exchange provided memo key generally.

·
·
·
·
43
  ·  last month

Thanks again @pfunk. I went ahead and used the memo, just in case. All worked fine.

46
  ·  last month

Hello Pfunk, I'm trying to verify my Steemit account with Streemian so I can use Curie. Is my active private key (wif), the big long password that Steemit generated for me when I first opened my Steemit account? Or is Streemian wanting something else? How do I verify my Steemit account with Streemian so I may use Curie? Thanks!

75
  ·  last year

hey, should i take a screenshot of my keys, print it out then destroy the digital file?
I don't know what to do about this new information...

46
  ·  last year

@pfunk Thanks for all this info, I FINALLY understood what all those keys were for :) (I already had a secure password, I'm not that bad :D) Following you!