How to get back your compromised Steemit account

If one day you log in your Steemit account and you get the warning "This login gives owner or active permissions and should not be used here. Please provide a posting only login. ", the possibility is that your account is at security risk and compromised. You should recall if you provided your WIF to any third party before; in my case, my friend provided his WIF and active key to these links:
http://app-account.streemian.com/
https://v2.steemconnect.com/authorize/@streemian

You should recover it as soon as possible. These are the steps of how I helped my friend get back his control over the account.

1. Submit the request for account recovery to Steemit with your registered email and recent "password or WIF" in the link below:
   https://steemit.com/recover_account_step_1
   Wait for the recovery approval email (it takes about 1 day for approval)

2. After receiving the approval email, click the recovery link and fill in the recent password to generate the new password, then re-enter the new generated password to get back the control.
   https://steemit.com/recover_account_step_2
   Login with the new password. Remember to keep the new password safely and be careful next time.

Rule of thumb is never ever providing your private key to any third party in this trustless world.