A lot of accounts has been compromised here on Steemit due to an exploit and bad security-routines. I hate losing money, and I am sure you would hate to lose your steemit account due to your own stupidity, so right now is the time for YOU TO SECURE YOUR ACCOUNT THE RIGHT WAY!
Step #1: Go to https://lastpass.com/ and install the chrome & firefox addon - buy the premium package, security is worth paying for.
Step #2: Go to Permissions here on Steemit and change each password so you have a unique password for each login (Posting, Active & Owner)
A great password should contain at least 100 chars and look something like this: 9J7Jw64fH&SuoTPZj1y7LmsVDZnwW1X4B3u084*DxgY!y8vv94@9nA6%g8U1LyIuU6gThAO!R6gw0JjThj8yVNSF0csh$F&D!J
The Password-handler (LastPass) will take care of remembering it for you.
Use your Active Login for Money/Transfers
Use your Posting Login for posting & upvoting.
Put your Owner-Login away in cold storage, do not use it to log in with EVER, unless you are selling your steemit account.