![images.jpg](https://cdn.steemitimages.com/DQmUmvh8LJMBCmw4ckb28a9bM2qBnMrDRvFMz8KsLWeJfvF/images.jpg) 

Steemit account got hacked is not a new thing. I never thought that my Steemit account would get hacked one day. It was the last thing on my mind. I couldn’t deny the fact that I’m negligent and careless. Previously, I have come across a few posts on accounts being hacked/account security/password recovery, however I was being mindless.

## Here is how it happens and how I recover my account:

I have joined Steemit for almost a year. During the first few months, I’ve been actively sharing posts and engaging with other Steemit members. However, I have decided to minimize my time spending on social media and eventually “disappear” from Steemit for some reason since April 2018. I have delegated almost all of my Steem powers to bots and would only logged into my Steemit account every once in a while.

The last time I logged into my account is around end of August if I am not mistaken. Until few days ago, I was really surprised. I try to logged in to my account, but it kept saying “Incorrect password”. I tried several times and it still doesn’t work. It’s getting fishy. I realized something may be terribly wrong. 

I check the wallet of my account and OMG... someone has hacked into my account **2 MONTHS AGO**. My STEEM was converted to SBD and transfer out to blocktrades. I was panicked for a while and don’t know what to do. I do some quick search on account recovery and quickly start the account recovery process. I did a quick read on relevant posts written by @someguy123, @simplymike and @firepower too. (Head over to read these posts if you haven’t done so!)

1. [Got Hacked Here’s How to Get Your Account and Reputation Score Back](https://steemit.com/mapsters/@simplymike/got-hacked-here-s-how-to-get-your-account-and-reputation-score-back)

2. [Dummies guide to basic steemit account security + account recovery guide! Must read for steemit users!](https://steemit.com/steemit/@firepower/dummies-guide-to-basic-steemit-account-security-account-recovery-guide-must-read-for-steemit-users)

3. [How the steem account recovery works and why your trustee can't steal your account](https://steemit.com/steem/@someguy123/how-the-steem-account-recovery-works-and-why-your-trustee-can-t-steal-your-account)

What makes thing worst is after I realized **account recovery process is only work within 30 days of last password changed**. 

I was terrified. Just when I thinking how much Steem and SBD I have lost, I go to Steemd to check on other details of my account. To my surprise, I am so so grateful that my account was only changed 2 weeks ago!! What a relieve! The hacker didn’t change my master key once he got access to my account.

![bggbkjhnk_副本.png](https://cdn.steemitimages.com/DQme3vEJxBX5tobf3nRGatYQW4aSHa8PdGEFpiDwENVYPBB/bggbkjhnk_%E5%89%AF%E6%9C%AC.png)

![123.PNG](https://cdn.steemitimages.com/DQmVYe7jkhYf35QqHnwLsz5pUE7Bics5jjuLcNHmZKP848a/123.PNG)


I have done some dumb and careless mistake by using master key as daily login password and the password is saved in my web browser. I couldn’t blame anyone for my own negligence. This is a very good lesson to reflect on myself, not only in Steemit, but in other aspect of my life as well.

I cannot deny the fact that I am being negligent when it comes to making life decisions. Ignorance makes up a big part of my negligence. Ignorance not only costs us money, but time and opportunity cost as well.

## My takeaway lesson is:
1. Never ever use master key for daily login.
2. Password can never be saved on browser and the importance of clearing browsing history.