Warning! Do not log on (anywhere) using your owner key

in #steemit7 years ago

Hey Steemit,


(image from openclipart.org)

After chatting with someone I realized that a lot of newer users probably don't know about this. In Steemit you have four important private keys (per account) that you need to keep track of:

  • Owner key: also might be called Master key
  • Posting key: used for posting, commenting, voting
  • Active key: used for money, the market, delegations, etc
  • Memo: used to send encrypted messages

If I've already lost you, and you have no idea what I'm talking about...then this post is for you!

Chances are quite good in this case that you are using your owner key to log on to steemit.com (or elsewhere!!)

This is a bad idea, don't do it!

Not even on the Steemit.com site, it's a bad idea! If your owner key is intercepted, then you are going to get Owned. And if you are using your owner key to log on to a third party site? That's madness.


(meme generated on https://imgflip.com)

If you don't have all four of your private keys written down and saved somewhere safe, then you need to do this:

  1. Go to https://steemit.com/@[your account]/permissions
  2. You are going to have to use your owner key for this (just this one time!)
  3. You'll see your public keys there. You don't need to write these down, everyone can see them. They start with "STM".
  4. You are going to need to click on "Show private key". This will show your private key. It starts with a "5".
  5. Write down these four keys in a safe place! Guard them with your life. Your owner key is your steemit soul!


(image from quickmeme)

Gandolf keeps his owner key safe!

How do I log on now?

When you log on to a steemit type site, use your "POSTING" key. You'll be able to post, comment and vote normally.
If you have to send money or do something with your money, you'll be prompted for your "ACTIVE" key.

You have to keep this two keys safe as well of course. If they get compromised, then you will need to quickly log on with your Owner key to change your keys (password). For usual day-to-day purposes, you should never need to even touch your owner key.

Ok, I hope this helps, stay safe out there!

Sort:  

Your post is really helpful .....got to know more about steemit.....thanks for sharing

Thanks for the tips, I wish I saw your post BEFORE I changed my owner password. As it stands now, I made note of all my public keys but not the private ones. I know, I know, but i'm new to this! So now I can't see my owner private key. I have the other private keys but not the owner. Can I find out what it is or do I need to close my account and start over?

If you have lost your private owner key, then it's probably gone forever. You might try searching your computer for it.

I never saved it, I just took note of the public keys. Yes, I know :( But, I just came across a post that said the owner key is the same as master password and I do have that one. Are they the same thing?

Yes the owner key is also the master password.

Thank you!

what is the differences

Thanks for the info. I made a smaller mistake in this vein earlier in my steemit career. Thought I needed to put my posting key in a memo sending money to and from bittrex.

Was my public key so no biggie, but at the time I had no idea everyone would be able to see it and could have gotten destroyed had it been a little different.

Thanks for educating folks.

Good advices, its very important to keep the private key private, thats why its called private, dont use it anywhere else besides steemit to assure you are safe.
Thanks for the information

THANK YOU!!!!! and Thank you some more for this advice. You definitely saved me from potential misery down the line. You are AWESOME @neoxian!

Good call. I have been on Steemit for a while and still not doing this. Now that my account is worth more than pocket change need to tighten up on security.

Just don't sic that dog on me man! I'm on it.

"warning, do not read this sign." Too late, lol.

Thanks for your call man

Thank you for the information and for the warning. I think that nowadays the security is the most important thing

Thanks for sharing this very important information. I have read a lot about the scams going on and hope all the new users find this post before it’s too late.

Thank you. Heard a lot of chatter about this in the last day or two and you happened to catch me at home on my computer, so i've updated my login.

yes of course, the most new stemians do not read the faq of steemit, overtou or technical details, and the notions of several type of password in a social network is casi unknown. even the warned users need a little reminder like this to change their passwords. thanks sir @neoxian you are awesome.

Thanks. So.. what to think about apps like eSteem ? They are asking your owner key to log. Personally I don't like that, but it seems well accepted in the community. What is your opinion about this ?

I don't think it's a good idea for reasons stated above. Nothing magically changes just because it's eSteem.

Indeed. Thanks.

Thanks so much, I just was helping someone get back into their account. I knew how to, but I didn't know why.

I didn't know much about these four keys. I do use a key (I don't know which one?!?) to log in into steemfollower.com and that's it. The rest is already memorized in my personal computer.
Thanks for the info! You are always helpful

I didn't even like logging into dtube tbh.
anything that asks or a code from another site seems sketchy to me.

Thanks a lot for sharing this with us.. I am relatively new to this community and I used to think Master Key is the only thing I need to keep safe.

You just demonstrated what this platform is all about - Words have the power to express, share, help, empower and be used for all the rest of the right things in life! Thanks again! :)

excellent post; I've been warning others but there are new users every day

Thanis for post! I needed to read that and am going to make some changes immediately. Thanks again!

i never tried using them BTW thanks for sharing this advice i will avoid using them on other third party sites :)

Time to change the password then. Thanks!

I am sending you a chat on Steemit chat with a question about owner key. Hope you can help clarify for me. :)

@neoxian,
OMG actually this is the 1st time I got a clear idea about it! Thank you very much bro! Really useful stuff for us!

Cheers~

I was just talking about this with some peeps in comments. I think a lot of new users need to be aware of this. Thanks for putting the word out, resteeming!

You explained this incredibly well. I think it will help many new members.

My husband @harleymechanix made me read this. I'm new to crypto. Steem popped my cherry! Thanks for posting stuff like this and looking out for the newbies!

NurseJamie.jpg

nice piece of reminder for all steemians that are new and old. thanks.

This is really nice, really loved the explanation.
It was just on point.

Is the owner key and master password the same?

Yes

I use a password manager and use the master password only in steemconnect and steemit. Both are steemit inc sites. I never type it myself which ensure that keyloggers can't get my pass. Is there still some way for hackers to get my pass?

I do the same :/

My lord. Just when I thought I was beginning to understand this intricate and technologically sound world just a little bit... THANK YOU, I HOPE YOU KNOW YOU'RE A LIFESAVER.

X

Yes this is almost... endless. So much information, there is always something new.

I am glad you write about this, many users of steemit especially the newbies fall victim of this. All keys are important for safe keeping.

Thanks so much for sharing! This was something I was pondering on and am glad I found an answer here! Appreciate the step by step guide too. Will give it a whirl.

Thanks, I know little about these keys. I will investigate further to make sure I have them all, and am using the correct key. Excellent post @neoxian.

AAh finally!!!
Thank you for your clear cut direction.
Thank you for making a little bit more sense of this crazy maze called Steemit! :)

I avoided a near disaster the other day with the owner password. lol I will write a story about it. If it wasn't for @littlenewthings I would have lost my account.

Thank you for the tips. I will sure put them to good use. Do you think chaning your owner passoword regulary is a good idea?

I already knew this but, your advice is critical for a lot of users who don't.

Excellent post, resteemed & upvoted as everyone should be aware of this!

Thanks again for the post went back over it and did not even know there was more passwords haha thanks again

This post recieved an upvote from minnowpond. If you would like to recieve upvotes from minnowpond on all your posts, simply FOLLOW @minnowpond

Interesting! Thank you for the info!

Thank you for sharing this. Upvotes n follow u. Hope u wil.

Now that's what you call a good helpful well put informative post thanks!

Some only learn from their own mistakes. I am more than happy to accept your warning. Thanks for heads up!