Steemit Newbie Part 3 Security

How can you keep Steem account secure?

1. Save your master password and keep it somewhere safe.
2. Log in with the lowest level password your posting key.
3. Use your active Key only for money transfers or voting.
4. Use your master or owner password only for changing your passwords or recovering a stolen account.
5. Never paste your passwords into Memo boxes and always doublecheck what you have copied and pasted before checking the OK box. Log into your account using the key with the appropriate permissions for what you are doing:
6. Steemit recommends that you NOT share your password or keys with any third party site.

Remember

Your account master password is used to make all the other keys for your account, including the owner key. If someone has your master password, they can steal your account and all your money in the account.

The master password a long string of random numbers and letters for maximum account security.

For safety for these rules:

Posting key

1. Use your accounts posting key to post, comment, edit, vote, resteem, and follow or mute other accounts.
2. Use your posting key to log into Steemit.
3. The more you use a password the more likely it will be stolen, so use this one the most often to limit the damage which be done to your account by having a key stolen.

Active key
The active key is meant for secure or special tasks like transferring funds, power up/down transactions, converting Steem Dollars, voting for witnesses, updating profile details and avatar, and placing a market order.

Memo key
The memo key has no purpose right now, but in the future may be used for communications.

Owner key
The is the most powerful key you have and you should guard it carefully.
It can be used to change all the other keys.
It is best if you store it of an account offline and only used to recover a compromised account.

Offline storage
Consider digital offline storage, such as an external disk or flash drive, as well as printed paper. Use a safe deposit box for best redundancy.

Frequently Asked Questions

1. What if I lose my owner keys?
   If you lose your owner key otherwise called your master password you can lose everything in your account.

2. If you lose or some steals your other passwords or keys, like posting or active key?
   You can change or create new posting or active passwords or keys with the master password or owner Key.

3. Are my STEEM and Steem Dollar tokens insured in the event of a hack or if someone takes over my account?

No, cryptocurrency like Steem or SBDs can not be taken back if stolen or sent to the wrong account.

1. What protections are built into the Steemit wallet to prevent theft of my money?
   If your tokens are in Steem Power, it is impossible for a hacker to take out more than 1/13 per week.
   If your tokens are in savings, there is a three-day wait period for them to become transferable.

2. What do I do if I discover that someone hacked my account?
   If you made your account through Steemit and it is compromised, immediately visit the Stolen Account Recovery page. This link is also available in the main site menu. You will need to provide the email address that you used when you signed up, your account name, and a master password that was used in the last 30 days.

3. How does the stolen account recovery process work?
   If your password has been changed without your consent, then the account designated as your recovery account can generate a new owner key for the account. The account recovery must be completed within 30 days of the password being changed, and you must supply a recent owner key that was valid within the last 30 days. Steemit Inc. owns the default recovery account (@steem) for all users who sign up using steemit.com. Steemit can only identify users by their original email, Facebook, or Reddit logins that were used to signup via steemit.com. If you don't have the master password or owner key that was valid the past 30 days, or are unable to prove that you are the original owner of the account, then your account will be unrecoverable.

How do I report a security vulnerability?
If you find a security problem please report the problem to [email protected].

Thank you for reading👨🏻‍💻🌋🏝
Photo Credits
All photos are royalty free public domain like shutterbug. Pixelbay or Flickr.

References & Credits

1. Steem White Paper
2. Steem FAQ