I think I understand. So, to use Ecency, for example, I have to have to enter my posting key and my active key in Hive Keychain. There is no way around that, right?
But if I understand you correctly, my Hive Keychain can only, potentially, be hacked when I'm online (logged in), right?
If you want, you can use Ecency with just your posting key. You won't be able to make transfers, power up etc. without the active key though.
Your keychain is protected by a password, so as long as that is secure, the only way you can be "hacked" is if a site tricks you into signing transactions that you shouldn't. You can always look at the details of any transaction Keychain is requested to sign. If it only requires posting authority, it is low risk.
That's comforting to know. Thanks for all this valuable information!
!POB
!PGM
!CCC