Our Steem accounts are designed to be as safe as they can be. The most common reason that accounts get hacked/stolen are because the owner doesn't take proper precautions with it.
To safeguard yourself from hacking, we first need to take a look at some ways that it can happen to us. Some common ways that accounts get hacked, lost, stolen from are as follows:
Here are some common ways that you can help you avoid getting hacked:
Disclaimer: This answer is NOT meant as a cyber security advice. Please understand that these are just some common sense ideas used by people to safeguard themselves against hacking. There is no such thing as too much protection and getting hacked even after taking all these necessary precautions is still your own responsibility.
To prevent steem account from hackers, you have to be careful. Keep your posting key, active key and master key somewhere safe where hackers cannot reach. You print or write those keys on paper and keep it offline.
There are three keys. And there are some reasons of having three different keys. It provides different level of security.
Always use posting key to sign in Steemit. You can use posting key to make post, comment, upvote, flag and all these basic communication.
Use active key to transfer fund. Some Dapps also require active key to log in. To vote witness, you need active key.
Use master key or owner key to change password. You can do everything using master key. But do not use it for everything. I see some people became victim of hacking because they used master key to sign in and hackers got the master key, changed the password. This is horrible situation.
If someone gives you free offer or instigate you to click any link, be careful. If you click any link, check out the url. Sometimes hackers redirect you to phishing site. It looks exactly steemit. If you see the url, you figure out that it is not steemit.
Hackers use different techniques to get access to your account. So always be careful and stay safe!
You have to be careful when using Steemit. Don't click the link that you are sure of. Check the url to know whether you redirect to right website.
Always use posting key to sign in Steemit.
To transfer fund and some specific activities such as witness vote, use active key.
Don't always use master key. Use master key to change password. Keep your keys somewhere safe.
The most important thing is to keep your private keys private. Don't let them be exposed to anyone who shouldn't see them. Store them securely, preferably in an encrypted format.
Steem accounts have different keys serving different purposes.
Owner Key: this is the most important key. It allows you to change all the other keys if they are leaked, to protect your account. You can also recover your account if it has been stolen by using this key as proof of ownership. It also does all things the other keys do.
Active Key: this key enables you to transfer funds and make posts
Posting Key: this only supports posting and voting