With the influx of new users who aren't necessarily crypto savvy we have noticed many members are not being safe with their keys so we created this handy little guide to keep your account super safe. The Hive password system is tiered so you should be using certain keys for certain things for maximum safety. Your passwords can be found by clicking on Wallet > Permissions
The Different keys and what they do
The Master/Owner Key
Upon account creation you will be given a master password. This is the one that starts with a P. This is essetially the key that controls and allows you to change the other ones. It is the one key to rule them all. You need to keep this one safe.
When you create your account you should immediately save the master key on a document and store it on a usb key. Also write it down by hand and store it in a safe place. This is the only key you have at the moment and Hive will ask you to use it to login so you can access your other keys. Be 100% sure you have done this step correctly before moving on.
After completing the next step you should keep this key offline. You can not have enough back ups of this one and you should never, ever use it to login! This key is only needed to regenerate all new keys and if your account gets hacked you will need this password to attempt account recovery.
Next login using the master password and click on wallet > permissions. Here you will see all your keys. Copy each private key (by clicking the show private key button) onto your document, double check each one and make sure you have no copy pasting errors.
To reiterate, you should now have your master key copied down by hand and stashed away and you should have a copy of all your keys on a usb key. Keep a document on your desktop for the posting key only and include the account details you used to sign up (phone number and e-mail address).
The Private Posting Key
This is the best key to use for day to day Hive activities. It allows you to post blogs, comment, vote and follow. If someone gets a hold of this key the worst they can do are the above actions. If you need to use a third party service it is best to only give this key.
The Private Active Key
This key is a step up from the posting key as it allows you to do all the things the posting key does but you can also transfer funds, use the internal market, delegate and vote for witnesses. This key should be kept very safe as well and only used for these actions.
The Private Memo key
This key allows you to decrypt encrypted messages sent to you via the wallet
Tips for keeping your account safe
- I said it above and I'll say it again, keep your master password safe and offline
- Only use the lowest security key for what you need to do, ideally this should be the posting key for daily activities and the active for money transfers
- Upon account creation make sure to save all the keys in a safe document and make multiple backups (keep at least one version offline incase your computer explodes)
- If you regenerate a new master password it will also regenerate all new keys, make sure to copy these into a document as well.
- Be aware of phishing attempts, there have been numerous cases of spammers leaving links in comments to fake hive sites/dapps that ask you to login. At the least only give your private posting, but please try to verify if the site is safe before giving any keys.
- If you feel your account is compromised it is probably best to regenerate new keys, make sure to follow all the steps above for safe keeping.
I can't login! What should I do?
Take a deep breath and don't panic. The most likely cause of this is a copy paste error. Sometimes you may be picking up a space before or after the password and Hive will not accept that.
Occasionally Hive decides to be a jerk (we are in beta after all) and gives this error for no apparent reason. Try again and be sure you are copying the full password correctly.
If you have been saving your password in the browser you can follow these steps to find it on google chrome. If you are using another browser just google the directions.
If all of these fail and you have exhausted all the options you may need to use account recovery. You will need to enter your previous master password so this only works if you have changed the keys and if you made your account through hive: https://tools.hivechain.app/recovery/
If you created an account using another service you may need to look up the directions for recovery using that specific service.
We want everyone to be as safe as possible when using Hive so please take your online safety to heart. If you have helped new friends sign up make sure they are informed! Stay safe!