the first thing would be to store your master password offline and only use the relevant keys on your phone , the one for posting and the one for financial transactions, that way no hacker can get to it, and even if they one of the other you always have the upper hand
as for the blacklisting and downvoting , i fear that might be the complete downfall of this thing over time ... there's a botnet growing , in both number and power, nothing to do about it, people can put you on a blacklist ... simplegame got put on it by minnowbooster for '???' reason .. there's nothing you can do about it, i had an account wrecked by the anti-sbi squad but you have 
ask 
if we dont help ourselves its each man and woman for himself and the only counter is to have more money than the next person
which isn't very social and community if you ask me ...
just fyi ...
NEVER enter your main password on a device you use frequently, and do not store it somewhere that can be accessed from the outside
that way someone would have to get into your house to get the key
see you around
owh
[ edit ]
allow me to swat myself for a sec, talking like the itsonly100dollar-people, assuming everyone simply HAS spare devices and phones lying around :/ sorry for that
in essence, to be as sure as possible you would want to start on a 'fresh' phone , (reset to factory ... i know, i know, but we're talking real money here and people will hack you for a dollarcent)
install only trusted applications first
get your relevant keys after entering your master password once then immediately delete it from your phone and if possible use a cleaner to remove any potential rubble left over
get your master psw (and if need be the other keys) on something that's offline (even a piece of paper, but paper is very vulnerable) and then ONLY use the private/posting/memo keys in the relevant parts
steemit / steemitwallet (i dont know what steemmonsters wants, if it were to ask my master password , for me , i would simply not but im not telling anyone what to, just how to in case)
and then AFTER that you can install all the tidbits you use for fluff on photos and what not (the last big hack had apps infected AT THE STORE ... meaning the malware was there before you download it to your phone, im quite sure they check that now but still ...)
i'd recommend against using internet café's or the likes, even if the owners probably wouldnt those machines are accessed by dozens if not hundreds of people, there can always be artefacts (leftover data) and even if you cant access everything you can still copy stuff from the machine to a flash drive or card to take home and decipher
thing is, cryptowallets, lacking a second layer (like 2factor) are basically the least safe things on earth as they are open to guessing (even if the chance is REALLY really low, its accessible 24/7 from anywhere , maybe even the International Space Station or aliens passing by) so, personally, i would even recommend to never keep to much steem in one account, despite the fact that 'its cool to be a dolphin' and despite the fact that the elders would like you to have only one (while of them have multiple themselves)
that's practical ... not negative or positive
(i just wanted to correct that ...)
now
as i like to say in my own exaggerated way :
ignoring a moving train by being positive and smiling at it
will not necessarily go it make away because it's inconvenient,
some issues simply ARE, regardless of opinion , ask around at devcon or something what those ppl would say about it, im just a rank amateur after all
RE: Being A Victim on Steemit😊