Hello @thekittygirl, Thank you for your interest in Fast-Reply.
I understand your fear when Active/Owner key appears on the screen. We are also.
That is why the application is using SteemConnect to perform authentication.
If you are not familiar with it, it is exactly a service that resolve the issue you are refering to.
The thing is that you are authorizing the application to perform a given set of operation (in this case only posting and voting). But giving to authorization is done once and requires a more powerful key. Our application never see any of you keys, we only have a token allowing the app to operate. The token never leaves your browser, and it is destroy after 7 days, or directly if you logout.
Learn more about SteemConnect:
@roxane and myself are available if you have questions regarding @fast-reply.
Thank you for the clarification!