Your Steem account is worth money! How to secure it with a new owner key to keep it yours forever

in steemit-guides •  8 years ago  (edited)

View this post on Hive: Your Steem account is worth money! How to secure it with a new owner key to keep it yours forever


Sun Yuchen is a liar, thief, charlatan, and all around cunt. But I don't need to tell you that. Find me at Hive, where we are glad to be rid of him and all of his fake followers, sockpuppets, and thieves.

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!
Sort Order:  

Newbie here. I don't have a pencil showing on either posting, active, owner or memo. Anything I've missed?

  ·  8 years ago (edited)

Hey and welcome. It seems these have been deactivated for now, probably to prevent people from logging in with their active or owner keys. Thanks for pointing this out!

Thank you

great guide! I prefer keepass or enpass as password managers / creators.

I agree password managers are easier. The guide above is good for the paranoid. One thing I found that wasn't clear was how to select your password. It seems like there must be a faster / easier method.

Perhaps some ideas on how to generate a good brainkey.

  ·  8 years ago (edited)

Diceware actually doesn't take that long, if you just keep rolling the dice and marking the result down until you reach 100. Then convert the rolls into words all in a batch.

The point is it's really good randomness. Furthermore, since this owner key is meant to be a one and done, and Steemit could potentially be around for decades, a password with 258 bits of entropy should be good for a while, right?

With KeePass, you can use the password generator. Specify a minimum of n characters, indicate upper/lower/numeric/special etc etc. Then press generate. The password will meet your specified criteria and be non word based.

keepass is AWESOME !

Thank you!

Awesome guide! Thanks for sharing this.

Is this guide still accurate? I just signed up but I do not see these pencil icons on my permissions page, even though I am logged in.

I've encountered this same thing. Only allows me to change the password to a different random on-site generated password.

I'm in the same boat. No pencils.

  ·  8 years ago (edited)

Thank you for the guide. But if we want mass adoption this process must be easier

would it be possible to create some kind of archive/folder/place for articles like this?

If someone has access to all but the owner key, what can they do? What are the permissions for each key?

  ·  8 years ago (edited)

The other keys can do everything but change keys (transferring funds, voting, etc.). The main thing that protects the value of an account as long as you have the owner key is the powering down process taking two years, and one week for even the first payment. If someone were to take over your account (via the other keys) and for example start powering it down or using it to vote on their own posts, you could recover it with the owner key (by changing the compromised keys) and limit the damage.

However, if you have liquid steem or steem dollars in your account those could be stolen immediately with the active key. The memo key could be used to see your private messages.

Cannot change [Deposit using Bitcoin ] from wallet menu !
Ether and Bitshare are displayed, but cannot select.

Very well timed post my friend. Much Appreciated.

great job dear friend it will secure every one in steemit. thanks once again for briefing such an important point about securing steemit account.

Can someone check to see if his passwords were changed a second time?

I like this one, they run a podcast about security: https://www.grc.com/passwords.htm

Who is this? http://world.std.com/~reinhold/diceware.html

Very informative post:) Needed this information thank you!

Great guide, thanks!

For some weird reason, the password that I used to create the account (and which was written down) doesn't work.

I am only logged in because Chrome remembered the password. Attempts to login through a separate browser are unsuccessful. Not sure what to do. I confirmed the password at the time...

  ·  8 years ago (edited)

Good news is you're still logged in! Go to https://steemit.com/@blocks2517/permissions and click "show" on all the keys, and copy them down, then print them or do something to save them. As long as you have the owner key, you can change the other keys. If your master password is stored in Chrome you should be able to extract it too.

Never mind my earlier post that I now deleted. This is the easier option.

Ugh. Password was never saved in Chrome (checked). I'm logged in because of cache.

This kind of sucks. I was going to use this account. ..

No...Active and Owner keys need a login while the others are clickable.

Not sure sure how to extract a password from Chrome. This might just be a bummer story. No variations work.

If it's saved in Chrome you can do this: http://www.thewindowsclub.com/manage-view-saved-passwords-chrome

If you can't show the keys for active and owner it sounds like you're logged in with just a posting key though. Hopefully you can recover your original password if it was saved in Chrome but without at least the active key you won't be able to spend any reward.

You should still keep the password you wrote down safe. Someone may in the future come up with a brute forcing tool that can speed up the cracking by using the incorrect password as a hint. There is still a slight possibility that you can recover your funds in the future.

I realize that this post was made a long time ago... I' just wondering if it is still relevant. I can't seem to find the permissions screen. Any help appreciated, thanks!

good

username: tonyson

https://steemit.com/steemit-guides/@pfunk/your-steem-account-is-worth-money-how-to-secure-it-with-a-new-owner-key-to-keep-it-yours-forever

Updated password, I can login to my steemit account yesterday (POSTING, OWNER, ACTIVE key). But, today I can not log (I am not copying them with an extra space at the beginning or end).

I've entered the correct password, but I still can not connect. I can login to my steemit account yesterday

Image of Yaktocat

Probably the most valuable post in the long run for people ;)

thanks for the info

Sounds too complicated for the average cats. Don't believe in the mass appeal anymore.

It's your account, you're responsible for it. Do whatever you wish but this guide is for people willing to take a little time and maybe learn something in order to keep their accounts secure for now and the future.

I would personally recommend getting a password manager tied to your browser which you can access by logging into synced account. That way you can update passwords as frequent as you want plus you can print out a list of passwords for all the other services as well all at once.

Looking into the future, I can sense that internet users will need to install password manager at some point with emerging secure applications :)

Thank you for the guide. i will keep secure my steemit.

Thanks you just what I was looking for.

Thank you for your guide!

Hey Pfunk, I saw this and think it would be great to add it into the resource repository I wanna put together for newbies. I saw you read through my article already, just wanted to let you know. Good stuff man. https://steemit.com/wikiversity/@boardwalk-steem/lets-start-a-steemit-resource-repository

We must secure our account and password like The Wall Street keep their Golds...thank you for sharing information

Nice post, but it all sound gibberish to me ... I'm confused please

thanks

Nice guide, thanks!

Thanks! Very useful

gracias por la info

Useful for me

Thank you! I've been using Lastpass as an online password manager. I think I need an offline password manager too, probably a notepad and a safe deposit box.

I tried this and the icons next to each password are completely different than in the screencap above. All I have is a button that shows or hides private keys for posting, active and memo. No editing is allowed.

I can't do anything with the owner key; there is no button, no icon. I logged out and tried logging in again with the owner key and got a warning message that that was not allowed. It said I must use a private key, not a public key. What's that all about? Is this tutorial out-of-date?

I dont get it, too!! Where do I find my owner private key??

Quality information. Thank you very much!

If I have lost my Owner key is there is there anyway to get that information seeing how I can only access the public one and now private one? All info I can find basically says im kinda S.O.L.

If you still have your active key, you can still transfer funds, power down, and maybe even make a new account for yourself with a new owner key/master password.

Lol. I looked at the clock and so much time has passed. Your post was so helpful. Do you know an exchange that will accept prepaid debit cards. I need to resteem this fir reference...upvote for appreciation. Thank you!!

If you post your owner password are they able to see it on the receiving end?

What is this OWNER password?

This is your main password (owner account). You may change other keys with it. Don't show primary and owner passwords nobody!