Steemit Passwords / The Ultimate Guide To Key Safety

in #steemit4 years ago

keys-shelf-keychain-lock-615350.jpeg

With the influx of new users who aren't necessarily crypto savvy we have noticed many members are not being safe with their keys so we created this handy little guide to keep your account super safe. The Steemit password system is tiered so you should be using certain keys for certain things for maximum safety. Your passwords can be found by clicking on Wallet > Permissions

The Different keys and what they do

The Master/Owner Key

Upon account creation you will be given a master password. This is the one that starts with a P. This is essetially the key that controls and allows you to change the other ones. It is the one key to rule them all. You need to keep this one safe.

When you create your account you should immediately save the master key on a document and store it on a usb key. Also write it down by hand and store it in a safe place. This is the only key you have at the moment and Steemit will ask you to use it to login so you can access your other keys. Be 100% sure you have done this step correctly before moving on.

After completing the next step you should keep this key offline. You can not have enough back ups of this one and you should never, ever use it to login! This key is only needed to regenerate all new keys and if your account gets hacked you will need this password to attempt account recovery.

Next login using the master password and click on wallet > permissions. Here you will see all your keys. Copy each private key (by clicking the show private key button) onto your document, double check each one and make sure you have no copy pasting errors.

To reiterate, you should now have your master key copied down by hand and stashed away and you should have a copy of all your keys on a usb key. Keep a document on your desktop for the posting key only and include the account details you used to sign up (phone number and e-mail address).

The Private Posting Key

This is the best key to use for day to day Steemit activities. It allows you to post blogs, comment, vote and follow. If someone gets a hold of this key the worst they can do are the above actions. If you need to use a third party service it is best to only give this key.

The Private Active Key

This key is a step up from the posting key as it allows you to do all the things the posting key does but you can also transfer funds, use the internal market, delegate and vote for witnesses. This key should be kept very safe as well and only used for these actions.

The Private Memo key

This key allows you to decrypt encrypted messages sent to you via the wallet

Tips for keeping your account safe

  • I said it above and I'll say it again, keep your master password safe and offline
  • Only use the lowest security key for what you need to do, ideally this should be the posting key for daily activities and the active for money transfers
  • Upon account creation make sure to save all the keys in a safe document and make multiple backups (keep at least one version offline incase your computer explodes)
  • If you regenerate a new master password it will also regenerate all new keys, make sure to copy these into a document as well.
  • Be aware of phishing attempts, there have been numerous cases of spammers leaving links in comments to fake steemit sites that ask you to login. At the least only give your private posting, but please try to verify if the site is safe before giving any keys.
  • If you feel your account is compromised it is probably best to regenerate new keys, make sure to follow all the steps above for safe keeping.

I can't login! What should I do?

Take a deep breath and don't panic. The most likely cause of this is a copy paste error. Sometimes you may be picking up a space before or after the password and Steemit will not accept that.

Occasionally Steemit decides to be a jerk (we are in beta after all) and gives this error for no apparent reason. Try again and be sure you are copying the full password correctly.

If you have been saving your password in the browser you can follow these steps to find it on google chrome. If you are using another browser just google the directions.

If all of these fail and you have exhausted all the options you may need to use account recovery. You will need to enter your previous master password so this only works if you have changed the keys and if you made your account through steemit: https://steemit.com/recover_account_step_1

If you created an account using anonsteem or another service you will need to look up the directions for recovery using that specific service.

We want everyone to be as safe as possible when using Steemit so please take your online safety to heart. If you have helped new friends sign up make sure they are informed! Stay safe and happy Steeming!

Sort:  

Is it safe to keep logged in account with master key

You should not be logging in with your master key at all, please read the post it clearly states this!

If you're brand new and all you have is the master password (which I assume is the same as the master key?) but you're not supposed to use your master key to log in, then how do you log in? If the master key is not the same as the password I was given when signed up, then what is it and how do I create it? Thanks.

Thanks for the helpful information cheers mike

Thank you for this article, which very well sums up what I did not know when I was new (which is less than 2 months ago....).
Although it might be a little bit off topic, but one should maybe also mention that it is another great safety measure to power up and store Steam Power. As this is not transferrable, it also cannot be stolen. Somebody who stole your active key would first have to power down to get the money - and this could be easily detected by you.

Super important to check all links thoroughly before clicking them! Verify that it's actually a legit website!!! Don't get owned.

Thanks for the tips, new users need to know how to not get their accounts compromised, with a $ value attached to every account it's much more enticing to others to try to compromise your accounts here than on most other social media! (Unless you're a high powered celeb or politician)

Yes this is very important I agree there are way too many scammers and phishing sites out there.

Nice post...
Thank fot sharing...
Please upvote my post...

Thank you! This has been very helpful and imfortamative. :) Resteemed!

Very beautiful post and we always wait for your post because your post can make us motivated and support us who are still beginners in order to make a post like you

Thanks for this guide.

One thing that has always confused me is a SteemConnect authorization page for some apps that says you are authorizing a "posting role", then asks for your active key.

Can you shed any light on that in terms of permissions?

Confusing for me also

it's about time a major steemit entity reposted about this, i made a small post about it a few days ago / something that should def be front and center / peace

I have been seeing a number of users with little understanding of this over in PAL it was definitely time to out out a guide :)

One of the most useful posts on the platform .
Really !

Thanks @minnowsupport

A really great article I did well, my dear friend

someone requested for my posting key and i told him i don't know what/where posting key.i almost gave him the key. thanks for such article i now know the various keys am having

Please don't ever give anyone your keys unless it is a very trusted friend!

Sangat bermanfaat...
Terimakasi inspirasinya brader

This is a very useful information. The several keys that we have in Steemit is might be confusing, especially for new users. Thanks for sharing this information.

Very informative & useful.

Noted!

This is really important for new users. All the different passwords that Steem has can be confusing at first, especially when new users are also encouraged to sign up for different additional services that require the posting key and what not.

This is A VERY IMPORTANT blog post! Thank you for writing it.

I think this should be posted in as many languages as possible.

If you speak another language and you want to translate feel free, you can dm it to me on discord and we can resteem it on our msp-guides page! It's important information that every steemit user should know.

what a nice post.
I love this post.

I have no idea what those keys are for. Thanks @minnowsupport! Your tips are very helpful, now I know I have to write my master key and keep it offline.

When I try to use the "Private Posting" key with a 3rd party iPhone app, it won't take it. I seem to have to use the actual master password, which is of course risky... Is this "normal"?

I don't have an iPhone so I haven't used that app but unless they specify you need to use the master I would say not normal. I have heard a few complaints if password problems this week unfortunately I have yet to find the cause of this. Perhaps try another app like esteem?

eSteem is the one I am trying to use. Seems to only want the master.

Good greetings from Venezuela, I was looking at the post and it is very explanatory information about the management of the security of our accounts I invite you to support me by visiting and seeing my post @felixrodriguez

thank you shere with us, I'm new user so I keep follow your guidline :)
Can you tell me, how can I change my username on steemit ??

I don't think you can change your username on Steemit.

I think it's because of how the blockchain works.

Good evening friend minnow support, 7 days ago make a transfer for 0.5 sbd, to pay to the account of the following publication:

https://steemit.com/vidapersonal/@thetiger/noche-divertida-en-la-piscina-momentos-inolvidables-en-familia

the refund of the unrealized transaction was not made. I would appreciate an answer about that.

Nice to see a reminder post go out @minnowsupport great for new arrivals to be aware of this right from the start.

Very good information , really helpful post.

thanks for information :)

Thanks for the important update

i use mozilla , that is save for me?

Thank for the kind information

Coin Marketplace

STEEM 0.23
TRX 0.06
JST 0.030
BTC 21404.66
ETH 1239.57
USDT 1.00
SBD 3.24