Keep your Steemit Master Key Secure or end up losing access to your Account 😱
If you’ve read one of my old post that is circulating online on Steemit’s Permission key and you’re still using your Master Key to sign in, then you’re essentially putting yourself at risk of losing access to your Account😱
I hope by now, you know the differences between a Permission Key & Password?
What does it mean to have something?
The difference between a password and a key in this context is that a key is stored for you, whereas a password is remembered through Memory as you get to set it yourself
When signing up, each account will have a total of 4 permission keys which a user receives upon Account creation. What is actually known as ‘’The Master key’’ which is essentially the main password that was first used when signing up for an account
You'll notice that during the sign-up process a long phrase will automatically get generated for you, because no one likes to create new passwords, so people tend to go with simple options that are easy to remember
Unfortunately, that also makes them easy to guess, so Steemit Developers thought it's best to stick with a generated passphrase, that would end up being difficult to guess but you could technically set your own preferred password (not recommended)
Today’s, complex sophisticated password-cracking software quickly cycles through common patterns and can even be customized to incorporate known information about the user. Making your Master Key, a easy to guess regular password could possibly put your account at risk
To maintain security for the system and users, Steemit users require so called ‘’keys’’ to request permission before doing a specific action that interacts with Blockchain data and features. Depending on which permission key is used, Steem’s Blockchain may grant full or restrict access depending on which is used.
Why is the "Master Key" so Important
The so called ‘’master key’’ is a special passcode reserved for certain sensitive account actions that won't need to be performed very often. For best security, I highly recommend that you NEVER USE your master permission key, do your best to kept this particular Password very secure and separate from your other passcodes.
- Grants full access that bypasses all the restriction
- The master key must be provided for Password or Key reset
You should never ever share your Master keys with anyone since it grants them total control over your account, share your Permission Keys instead such as your Posting Key! Regular keys that can be created and revoked, allowing Steemit users to use their accounts without exposing their Master Key
Fortunately, Steem accounts uses a variety of "Permission Keys", if you like to learn more feel free to read @pfunk post
I need you in my team! lol Thank you for the helpful tips.
Will definitely credit you in the future ^_-
Excellent post!
I would also encourage everyone to use a password manager like 1Password. If you know any of your passwords, they are probably already insecure and/or you are vulnerable to phishing attacks.
Cybersecurity starts with you.
1.Keep your OS up to date with security patches.
2.Always run an updated antivirus system.
3.Use a password manager like 1Password (you shouldn't know any passwords, they should be generated for you automatically).
4.Don't download or click on stuff you don't trust.
5.Don't ignore warning messages! (Also, don't click on pop ups which pretend to be legit warning messages).
While we're on the topic of good computer behavior, I'll also throw in: have multiple backups. Without them, if you lose your private keys or encrypted password database, you'll have a very sad day.
Dropping quality info for the noobs and for some veterans too! :-)
When Streemians ask for the active/owner keys? Could you explain that please
This Post kinda sums it up! If you share your Active Key, they have access to your Funds, you would need to trust Third-party Services (They could get Hacked or miss use your Active Key)
Thinks Ms
what if i didn't write it down, but have all the other keys? Can i somehow withdraw my coins?