In order to grant posting authority to another account you need to sign a transaction with your active key. This can be done in your local browser. If 3speak is asking you to input your private key in the website that is not secure. This can easily be done with keychain. Sounds to me that they need to work on that.