On a Wednesday in April, I was doing my thing – I am trying to develop a routine – of “doing” comments, checking posts and doing my bit for #steemitbloggers and #teamsouthafrica, the two Discord servers on which I am most active. I’m still learning my way, and I’m not as active as I should be on #worldofphotography because I don’t consider myself even a rank amateur when it comes to photography. I dabble at best, and tend to point and click my smartphone and my Samsung bridge when I am able. But mostly, am pre-occupied. So back to that day, and trying to develop a routine. It was also part of my strategy to build a reputation on Steemit, and maximizing the return; as one should, but to which engagement is a central tenet. Engagement is not just critical to success, potentially financially, but also to one’s sense of self on Steemit. That day, and the ensuing days taught me how true this is.
So, there I was, doing my “thang” and I came across this comment with a link about auto votes.
“Oh, cool,” Me thought, "this might be useful.”
But then Myself said, “Are you sure? That link looks a little weird and the real Steemit community doesn’t actually approve of too much automated stuff. You know you can’t comment and/or upvote within 20 seconds of the previous one.”
“Umm, ja, but that the hell? What have I got to lose?” I ask Me.
Click.
I get on with a few other things because, all of a sardine, there was a power outage. We live in the country and it happens from time to time, but it’s really annoying. Especially sometimes, as happened that day, it was scheduled and because of our poor mobile phone service here, we don’t find out until AFTER the fact.
Up to that point, my day had been uneventful, and I was happily preparing for my mid-morning meeting with a client.
Then the power came back on. Suddenly I had more notifications on my Discord icon than I’d ever seen – before or since. @Ginabot had gone mad. She was shouting. She was blaring, and she carried on shouting. She was going beserk.
“WTF?” I ask, in real words and CAPITAL LETTERS. “I” was suddenly commenting on posts that would never enter my consciousness, and in languages I could not recognise, let alone understand.
The next few minutes are a complete blank.
A huge knot develops in my stomach. What have I done? What do I do?
Not only a Minnow, but also a bit of a technodunce, I know that I need help and head over to the 
I confess.
I ask for help.
Mercifully, the calm voice of reason and (help) was online. Step by step 
“Which password? Which key?” He asks, instantly suspecting I’d been hacked. Then, came this instruction:
I couldn’t get to my wallet. I couldn’t get into my account.
Diagnosis: HACKED
And then, he asks, “Have you transferred any money from your wallet?”
“No.” I had not then, have not yet, transferred anything out of Steemit. I have done the odd small transfer to other user accounts but that’s it. I’m saving what little I have. For a rainy day.
He was checking movement on my account and sent me to check for myself: half my wallet was gone.
An aside: you do know that your wallet and its transactions are all public – if you know where to look?
Revised diagnosis: HACKED and PHISHED
All I could do, again talked through the process by the calm voice of reason, was to go through the steps to recover my account and wait.
By the time I returned from my meeting, an hour later, my hard-earned reputation had gone from a from 44 to minus one. Virtually everyone of my comments, not just the spam, had been flagged and downvoted. Gina was very busy passing on messages from Steemians telling me not to spam.
I felt helpless, horrified and mortified.
What “I” was doing flew in the face of everything I’d come to understand about Steemit and what the community stands for.
Oh, she of little faith.
As I was going through all this turmoil in my mind, that community and the special sub-communities of which I am part, #steemitbloggers and #teamsouthafrica, stepped in, rallying the troops.
The founder of 
Then, there was #teamsouthafrica, 
More humbling mortification: just the day before, I had volunteered and accepted a role in #teamsouthafrica, which I could not fulfil until I was back on Steemit.
But I still couldn’t DO anything. I had to wait until I received THAT email, allowing me to recover my account. You can’t rush certain things: there are things that HUMANS do in Steemit, and that is the monitoring of the support email and the account recovery process.
The email arrived, just under 24 hours later, and I logged in to deal with the mayhem. I followed the instructions from 
It was a long, emotional morning. Emotional because I was overwhelmed not just by the entire experience but by the support. Then, as they say in those awful television commercials, there’s more.
Again, Gina goes nuts. As folk realised that I was back on track, posts that were “younger” than seven days start getting upvotes, comments and the odd re-steem. I can’t keep up with her and the fantastic support.
I begin to feel overwhelmed, and have a lump in my throat because, yes, there’s more:
Steemians are still not done:
On Discord, I get this question.
As good as his word, 
Then the floodgates did open. The Husband who shares the office looked at me as I quietly lost the plot - tears were streaming down my face. I am tearing up again, as I write. I had told him about how supported I felt by this community, but hadn’t expected this level of support. He is now a vicarious 
Over that thirty odd hours, my emotions went from a sense of desolate violation, not understanding why anyone would hack into any account, let alone mine which had virtually nothing in it, to humble gratitude for all the care and support from the Steemit community.
That day ended with another message from the trusty Gina: a comment on a comment on a post on which I had no recollection of commenting.
Wow! My reputation was not just back to where it had been, but it was slowly creeping up.
All that was thanks, not so much to my hard work, but the support from the wonderful Steemian community and particularly #steemitbloggers and #teamsouthafrica.
So, what did I learn through this experience?
Clear your cache once you’ve recovered your account
A couple of days later, having recovered my account, I found myself “locked out” again. Advice was to recover my account again. I did. I waited for a few days for THAT email. In vain. I reached out to 
NEVER use your master password unless you HAVE to
DON’T
• save your password to Google or any other automatic password filler
• use it as a means of logging in to another linked Steemit platform or app, like Steemconnect, eSteem or Steepshot
• use it to post or comment – use an ACTIVE key for this
Hackers are real, we see it happening everywhere, rather be safe, not sorry.
• Make use of a password manager – I am fortunate to have a lifetime subscription to Sticky Password which operates in the cloud and across a number of devices. It has a number of features I really like, including a secure memo functionality and the automatic deletion of the contents of one’s clipboard.
Change your password
When you recover your password, CHANGE it.
And then
- Save all your passwords and private keys into a “paper wallet”. This post from
- Save all the public and private keys so that you have them on hand.
At the same time, and if you don’t know what they’re for, make a note of that so that when you do something and you’re asked for a DIFFERENT password or key, even if you’re logged in, you know what to do. - DO NOT change your password again in a hurry. You can only change your password every 30 days. If you try, you could get locked out of your account.
More about phishing and good advice on keeping your account secure comes from 
Listen to that little voice
We have three voices – Me, Myself and I. Do listen to that one that says to you that something’s not cool because it seems too good to be true. That means that one mustn’t click on links that look like this
It’s short and it’s too much like a steemit URL, but NOT QUITE. DON’T DO IT!
Have a PA
Had I not had Gina, I would have been oblivious to what was going on until it was too late. She is a bot and once you’ve registered with her, she’ll tell you about as much happens on your account as you need or want to know.
And last, but not least: Real, caring people live on Steemit
Over the couple of days that I had this crisis, I was literally overwhelmed by the care and support from folk. I have mentioned some that reached out to me and I want to mention two others. Both of them reached out to me in the midst of their own life crises and my hope is that anyone reading this goes and upvotes a current post as they can use all the help they can get: 
Humbly yours, and with gratitude
Fiona
The Sandbag House
McGregor
South Africa
Photograph: Selma
