Achievement 2 @cryptozimba Task: Basic Security on Steem

Introduction

Hie everyone, @cryptozimba is back again with another story. This time I will try not to exaggerate, my story as in my introductory article, or may be I will just do a little. So, I will describe my onboarding journey into the Steemit platform soon after registration. However, my main focus is on security, which was tihter than I expected. When I created my account I thought, I would just onboard and cruise nicely to posting and interacting. Well, I got the surprise of my life, and it proved that Steemit is so much different from traditional blogs and social sites. Let's, dig in!

I have to retrieve my keys?

So, when I joined Steemit, I was so relaxed and thought that it was just creating an account and my password and then straight to posting. Well, I got a very big surprise. Not only was I not given a chance to create a password, it was created for me!

So, after clicking the verifying my email and phone, I was taken to a page where I was instructed to retrieve and save keys for my account? Wait, I have to retrieve keys for the account? Should'nt an account get the keys from me? This was giving me very strong crypto wallet vibes. So, followed the instructions as given and managed to retrieve my keys. I downloaded the provided pdf and kept my keys closer to the heart. Initially, I wondered why would I have all these keys? One, is enough right? Well, no! It is not enough! Because there is a key for every occusion.

Do not just use any key!

So, I started reading about these keys, that I had received and I got a little more information. Initially I had wanted to send the document to my gmail email address but I realised I almost burnt a properly cooked roast. So, I promptly abandoned the idea. These keys, were not just keys, but they had a hierarchy and tiers to usage. Right, that's true, each key had a specific purpose starting from the lowest tier to the highest one.

Source: AI generated Image

The lowest tier was the posting key. This is the key that I use for everyday tasks such as posting, commenting, editing, resteeming as well as following and muting other accounts. This is the key that I use to login everyday due to its limited functions. It makes it esier for me to retrieve my account if it becomes compromised. It also limits the damage done to the compromised account.

In terms of authority, above the posting key, we have the active keys. These keys are more suitable for more sensitive tasks such as transfering funds, powering up/down transactions and converting my steem dollars. With this key, I can also vote for witnesses, update my profile and placing market orders. This key is much more sensitive than the posting key, and losing it will deal some damage to your account.

The owner key is the only key that you will need to use when neccessary. I am not even tempted to use it, if you see yourself using your owner key to login, know that you are in a very big trouble or you might not be very intelligent to say it lightly. With this owner key, I can change any key of the account include the owner key. Your owner key must be stored in a ver safe place. My rule is to only use this key, when my account has been compromised not anywhere else.

The memo key on the other hand is a little different from the other keys, that is why it is not in the hierarchy. A memo key is an encryption key. I use it to encrypt and decrypt memos when I transfer funds.

Don't just throw your keys around

Yes, another rule I gave myself about Steemit security is that I shouldn't throw my keys everywhere. Especially online, I had rather keep them locked up in a box somewhere.

Source: AI generated image

The problem with these Steemit keys is not that you have them or where they are stored, the bigger problem starts wen you cannot find them. So, it is very important for me to store them safely and securely. This is because if I lose my keys, no one will save my account, not even the steemit support teamm. Lose your keys and you have no account, may be you may have to create another one, now imagine that after all the hard work bulding the account and some steem dollars.

The most important thing besides the keys is the master password. Lose this and you are lost. For me, this password together with other keys have been stored in 3 different storages. I have a copy in my secret flash drive and also in my external hard drive disk. In my computer, I also have an encrypted file that stays there. In the case of a hard disk failure, I still have access to my keys. I am also preparing to safely print a copy of my keys that I can keep in my locker box. I prefer having backup allover except online.

How am I going to transfer Steem to my friend's Steem Account

To transfer STEEM from my account to another Steemit account, I need to follow a few steps. The first step is to get the neccessary authority by signing into my wallet area. After that I will navigate to current STEEM section. On this section I will then click on transfer on tthe top of the page. On the next page I will then enter the receiver's username and press next. This is how I can send funds to a Steemit friend. This action requires the use of an active key so, you need to have one.

I will power my STEEM then

I also learnt about how I would power up on Steemit. To power up on Steemit, I will first login into my wallet area. Then I will find how much Steem Dollars I have. I will then click on the little triangle next next to my Steem Dollars. When the menu opens I need to select market option. In the market option, I will enter the buy STEEM option and select the amount I want to use. I will then pass through all the screens including my password. Once I am directed back to the market, i will receive an order placed notification. Once I see my steem balance, I will then cick the littletriangle and this time choose the power up option. This activity requires an active key, as its not possible to power up with posting key.

Conclusion

I will admit that, this journey of learning about security on Steemit was a bit tiresome but also worth it. I learnt to start taking my security online very seriously. I wouldn't want to be a case study of people who lost their accounts because I did not properly take care of my security keys.