You are viewing a single comment's thread from:
RE: Newbie01 - A Beginner Guide To Steemit for an Overview of the Website Steemit.com
In item 1.3 login, I think you really really need to STRESS to use there posting key when logging in, not any of the other keys. When the active key is needed steemit will ask for it, example when conducting wallet transactions. And when ever a page ask for your key even if it is just the posting key, make sure you look at the web address and that it is steemit and not some variation on the spelling like an extra e or the letter i being replaced by l or 1 or any other spelling errors. Also when clicking a link on a steemit post look at where that link goes just rest the mouse over the ink and look at the bottom of the browser to see where it is sending you.
Other than that a nice quick over view.
Thank You @bashadow for the reminder. I really appreciate your constructive input to stress the importance of the posting key to be used in the login page.
However, after examine my step in 1.3, and since you have to login *for the first time, you have only one password from steemit since there is no other key.
Please feedback if my analysis is accurate
Thanks
Yes you have only the master password, and also no way of ever choosing your own since that is the masterkey for your blockchain wallet. So you need to take them through regenerating a new set of keys to be safe, but if you opt not to they need to know that they then go to wallet and view all the private keys one by one and copy them down, including the initial password they got MASTER KEY , keep this safe on an offline usb , paper in their wallet, something. Once they have
then they can logout and log back in using the posting key, keeping in mind the browser will ask to remember , which is ok. Kind of helps becuase a spam site url won't match so if asked to log in you will wonder why your browser or password manager did not fill this info out. When doing wallet activities they need the "active key" and may go copy that when required but do not let the password manager or browser remember or update the original posting key as your default pass. Same with steemconnect.
@penderis thanks for dropping by this post and appreciate your additional input to the various keys