Just be careful what websites you put your keys into.
Folks are pretty quick on phishing accounts, but it will still pay to be careful about giving your active key to anybody not on this list.
Steemworld , steem-engine, and steemconnect, all have a growing history of safety.
If you use chrome or brave steemkeychain is the safest way to manage keys.
If they go rogue many people will have problems.
But, the nice thing about open source is that folks independently verify the code.

Enjoy your new found steem power!