Sort:  

With SteemConnect2 you need to grant @busy.app permission to post on your behalf, so the app busy can post for you. This operation require at least your active key when you authorize the app then you can login with you memo key or posting key. You can revoke @busy.app anytime using this link http://v2.steemconnect.com/revoke/@busy.app
The active key is only used to make the operation in your browser then discarded, nothing stay or goes to the server.