I posted a summary version:
These are the points for security to not suffer scams or attacks or losses:
- keep your master password safe - see FAQ
- keep your owner key safe - see FAQ
- do NOT log in with your master password <<< My recommendation from reading about the scam alert
- log in with your Private Posting Key only when you are posting or commenting
- provide your Private Active Key only when you are transferring or trading (buy or sell) Steem or SBD