Hi @cryptokannon, @steemcurator01

As a part of Security, people have to be careful. Peoples do not try to click on unknown links, advertisements banners that receive from the unknown peoples, in such a case they can check the sender's profile and examine it, check the comment section to know how many comments they have made similar to it.

Here, maybe I am not aware fully yet but, what I am trying to understand is, Active key is an important and only one to perform any action under our wallet.

If your password has been changed without your consent, then the account designated as your recovery account can generate a new owner key for the account.

So similar to this, can I say the process is like first, it will check what has been changed without consent like Owner Key, Posting Key, Active Key and then accordingly it will generate a new key_{(Owner Key, Posting Key, Active Key)} which changed for the account OR only change and generate a new owner key.

I use Steem Keychain which prompts me on every transaction, I mentioned about it when I visit to the newcomer Achievement 2 post which is Basic Security on Steem.

I guess now based on such experience HACKER ALERT! PLEASE CHANGE YOUR PASSWORDS STEEMIANS!! it is time that we need to think more about Security and implementation of something like second layer security like Google Authentication or provide Dynamic key(change every 1 min) under wallet like below, for the transaction while transferring.