How to Change an Account's Posting Key

[steemed]

If you are paranoid like me, you can make a posting key that should allow you to log into the steemit.com website without entering the private key that grants full control of your account.

First, make a new key pair with suggest_brain_key, let's imagine it looks like this:

suggest_brain_key
{
  "brain_priv_key": "BUNCH OF WORDS NO ONE HAS EVER UTTERED",
  "wif_priv_key": "5STEEMPOSTINGPRIVATEKEY",
  "pub_key": "STMPOSTINGPUBLICKEY"
}

Now, save the private key (wif_priv_key) securely.

Take the public key (pub_key and use it as the 5th argument to update_account.

We'll pretend we are updating the account steemit:

update_account steemit "" STM65wH1LZ7BfSHcK69SShnqCAH5xdoSZpGkUjmzHJ5GCuxEK9V5G STM65wH1LZ7BfSHcK69SShnqCAH5xdoSZpGkUjmzHJ5GCuxEK9V5G STM65wH1LZ7BfSHcK69SShnqCAH5xdoSZpGkUjmzHJ5GCuxEK9V5G STMPOSTINGPUBLICKEY STM65wH1LZ7BfSHcK69SShnqCAH5xdoSZpGkUjmzHJ5GCuxEK9V5G true

In this example, the owner of the steemit account would sign in to steemit.com with the the private key 5STEEMPOSTINGPRIVATEKEY.

So if there is some spyware in one's browser, the most it can do is post some spam and not actually spend any STEEM owned by the account.

Comments

[dantheman]

For the truly paranoid, you should update the owner key and write the private key down on paper. This way even if your active key is compromised, no one can touch your Steem Power (aka Vesting Steem).

If someone did attempt to power down your account (withdraw the vesting Steem) then you would have ample time to detect it and use your Owner Key to update your permissions.

[steemychicken1]

i am afraid to type write now :) hehehehe i will do it.. just for the fun of it :)

[tuck-fheman]

Can someone ELI5 this for slow people like me using Windows?

[clayop]

FYI: If you change your post key, you cannot transfer/vest in steemit.com, since your active key is different from your post key.

[steemychicken1]

Great.. guide... i am already here because of you !!!!

[hillaryoki]

Please I'm still lost on this issue on passwords. I have gotten my posting keys today after weeks of login using generated keys given at the time of registration. How do I get my owner's key and active key?

[vijbzabyss]

Does it still work? @steemed