In my post: SteemIt Security Keys and Scam Alert - How to be Safe from Scammers.
@freedomshift/steemit-security-keys-and-scam-alert-how-to-be-safe-from-scammers
I described in detail about the security issues relating to:
- master password
- owner key
- posting key
- active key
- memo key (not used ATM)
There are public keys that you will see after you logged in with your master password - the one given to you at the creation of your account.
These are the points for security to not suffer scams or attacks or losses:
- keep your master password safe - see FAQ
- keep your owner key safe - see FAQ
- do NOT log in with your master password <<< My recommendation from reading about the scam alert
- log in with your Private Posting Key only when you are posting or commenting
- provide your Private Active Key only when you are transferring or trading (buy or sell) Steem or SBD
And obviously, keep all Private Keys safe as the Master Password and the Owner Key.