You are viewing a single comment's thread from:
RE: On Sharing Keys and Passwords with SteemConnect: How Safe Is It?
But what, if http://steemconnect.com is ever hacked and manipulated to fish the Master passwords in this process ??
But what, if http://steemconnect.com is ever hacked and manipulated to fish the Master passwords in this process ??
Hi @overunitydotcom, I'm not an expert in security. But I think getting hacked is certainly within the realm of possibility. There are some things we can do to reduce this possibility. First, make sure the steemconnect must be accessed via a secure HTTPS connection, so you'll need to make sure you see this on your browser:
Second, always use the Posting Key if all you're gonna be doing are upvoting, posting and commenting. If you do need to transfer Steem or SBD, or grant an app access to your account, use the Active Key. In short, never ever use your Owner Key -- reserve the owner key only for changing passwords.
Third, if you have any SBD or Steem in your wallet, move them to Savings or Power Up to Steem Power.
These should minimize your risk exposure. Hope this helps.
Hmm, but steeemconnect wants to have your master key, not just your posting key...
So who is running Steemconnect.com ?
They don´t even have an impressum ( about us) on their website... Why should I trust them with my master keys ???
Hi @overunitydotcom,
They don't store the keys that you enter in steemconnect. Also, you'll have the option of either the active key or the owner key (master password). I always use active key. Never use the owner key as much as possible.
Steemconnect was developed by the busy.org team (the team behind https://busy.org). They've been endorsed specifically by the Steemit team to develop it.
Just to let you know, I've used Steemconnect countless times and have not encountered any issue so far. So I'm reasonably confident in it now.
Can I really also use just the posting key when signing in into Steemconnect ?
I tried this , but they wanted always to have the active key... I would be more comfortable to use it, if I just only could use the posting key only...
Why is that not sufficient ?
Where is then my Masterkey stored ? On the Steemconnect.com database or where ?
Who can access it ?