Recently, I was noticed there were many scammers trying to make a fishing attack through fake links or proof a famous person ( for example 
It takes a while to explain your steemit keys which you can find under Wallet --> Permission tab
Now take a look
At there you will see 4 keys including POSTING KEY, ACTIVE KEY, OWNER KEY and MEMO KEY. The purpose of each key has been described below
POSTING KEY
The posting key is used for posting and voting. It should be different from the active and owner keys.ACTIVE KEY
The active key is used to make transfers and place orders in the internal market.The owner key is the master key for the account and is required to change the other keys.
The private key or password for the owner key should be kept offline as much as possible.MEMO
The memo key is used to create and read memos.
See permission key comparison from a post of 
For posting and transferring your funds, you only care POSTING KEY and ACTIVE KEY at this time.
You should use a password manager to manage your keys. Personally, I would like to recommend you to use LastPass. It is a powerful password manager as far as I know.
Please remember to enable 2FA for LastPass and backup your password vaults regularly.
Your username and PRIVATE POSTING KEY should be saved in LastPass in the username and password fields respectively.
The PRIVATE ACTIVE KEY should be divided into 2 parts: first part is about 45~47 first characters and numbers and the second part is the rest one about 6 to 4 characters of PRIVATE ACTIVE KEY. You should remember the second part of PRIVATE ACTIVE KEY or write to somewhere for picking it up easily whenever you wanna do fund transfers. Why you need to do this? Because if your LastPass account got hacked ( even it is very difficult), your funds on steemit are still safe because hackers need the second part of PRIVATE ACTIVE KEY to steal your money.
Your password shall be used to recover your account and change the other keys in case you got hacked within 30 days or be revealed your active keys. After 30 days your hacked account will be lost forever!
In conclusion: combine Laspass and steemit keys in the right way.
( ͡° ͜ʖ ͡°) => .....magicstone1412.....
