Most people use their active key to access their account when they really should be using their private key.
@pfunk wrote the first guide I ever read to keys click here.
I put this together after teaching my father how to get his posting key . Most external apps will require this key - the great thing about it is you can change it anytime rendering it useless for other services. My project Ladder.net requires the posting key (it is a post scheduler) - it is also useful if you ever branch out in the world of autovotes or you decide to login to Steemit the secure way!
► Watch on DTube
► Watch Source (IPFS)