Sort:  

The first time, every DApp needs the Active Key. From that moment, the Posting Key is enough. No?

Oh, okay, I have to dig in to that.

Exactly. active key is only needed in the first login. After that, you can login with your posting keys.

There is a technical reason behind that practice, I can explain further if you want :)