Account security and keys

Why are there different keys?

There are different keys with the appropriate permissions for what you are doing.

• Posting key - The posting key allows accounts to post, comment, edit, vote, reblog, and follow or mute other accounts. Most users should be logging into Hive every day with the posting key. You are more likely to have your password or key compromised the more you use it so a limited posting key exists to restrict the damage that a compromised account key would cause.

• Active key - The active key is meant for more sensitive tasks such as transferring funds, power up/down transactions, converting Hive Dollars, voting for witnesses, updating profile details and avatar, and placing a market order.

• Owner key - The owner key is only meant for use when necessary. It is the most powerful key because it can change any key of an account, including the owner key. Ideally it is meant to be stored offline, and only used to recover a compromised account.

• Memo key - Currently the memo key is not used.

What’s password or master password?

The master password is used to derive all keys for your account, including the owner key. If someone has access to your master password, they can steal your account and all of the tokens in it. The password has to be long and random for maximum account security that’s why Ecency signup generates them randomly and does not store it. After signup, it is recommended you change your password and backup safely. Again, save your master password and keep it safe! If logging in with your private posting key, make sure you don’t overwrite or misplace your original master password.

What do I do if I lost my password/keys?

There is no way to recover your account if you lose your password or owner key! Because your account has real value, it is very important that you save your master password somewhere safe where you will not lose it.

It is strongly recommended that you store an offline copy of your password somewhere safe in case of a hard drive failure or other calamity. Consider digital offline storage, such as an external disk or flash drive, as well as printed paper. Use a safe deposit box for best redundancy.

How account recovery works?

Account recovery only works if your password/keys have been changed within last 30 days and you still have access to your old password/keys. Entire process relies on recovery agent’s availability and your swift action within 30 days.