You are viewing a single comment's thread from:
RE: Keep it Simple - An Explanation of Steem's Public and Private Keys - (Moving from Facebookville to Steemville)
The last thought that I'll leave you with is that you want to always make sure that you check a website or form and make sure that you trust it 100% before you put in any of your private keys. Whenever you're asked to put in your key, you should get in the habit of thinking that it's like someone is asking to be added to your bank account.
Under what circumstances do we need to put our key onto 3rd party sites like you've mentioned in your post above? Are there any reliable 3rd party sites that you recommend?
@raised2b
There are lots of sites already, and there will be many more to come, that may need you to give them permission if you'd like to use them.
Some examples:
busy.org - A different front end for the Steem blockchain
chainbb - A bulletin board front end for the Steem blockchain
zappl.io - A twitter like service on the Steem blockchain
There are also service type sites like Streemian or Minnowbooster that may ask for your key so that they can vote on your behalf.
There is also a product developed by Steemit and Busy.org called Steemconnect that is going to be the trusted connection between 3rd party services and the Steem blockchain. Many sites are already using Steemconnect.
My rule of thumb is that I trust Steemit.com, Steemconnect and that's it. If I see any other site and I don't recognize it, I go do some research about it before I give them a private key.
The other thing to remember is that you only ever want to give out your posting key. Sites should not be asking for your active or owner key.
Thank you very much for the detailed explanation @raised2b.
Personally I have tried busy.org, and I realized that I have given the worst key possible. Any counter measurements or is it too late perhaps?
You have a couple of options here.
You could email the team at busy.org and explain your situation, [email protected] or even easier, you could just change your current owner key and get a new one.
Just go into your wallet and click the password tab and go through the process of creating a new owner key. Once you have that new key, it's like starting with a clean slate and now that you know how the keys work you can then only give out the proper key going forward.