Lions,
If you signed up on INLEO with Google or X, it's time to go from a Lite Account to a full, self-custodied Hive account. https://claim.inleo.io is where you do it.
As many know, all Lite Account keys were rotated this week. The claim process is simple and we're now opening it up for all Lite Account users to go to proper Full Hive Accounts.
Full Hive accounts are more secure and are what you SHOULD have if you hold any signficant funds in a wallet.
Here's what a Lite Account is, what changed and exactly how to claim.
TLDR; we usually let Lite Account users use INLEO and Hive without claiming their keys but all existing Lite Accounts are now being forced to claim their full Hive Account. After seeing a few users get phished/apparent AI attacks on their Google & X Account sign-in methods, we decided this is safer for all.
- Claiming is easy
- Claiming is fast
- Claiming is free
- Claiming is safe
In this AI era, we all need to revamp our security. Google & X as sign-in methods added a lot of inherent security issues.
Lite Accounts vs. Full Hive Accounts | A Quick Refresher
When you sign up on INLEO with Google or X, you get a Lite Account. It's a real Hive account, but it isn't full self-custody (your X or Google Account authenticates). INLEO generated the keys using Hive so you could start posting without ever touching a private key.
That was always meant to be the on-ramp, not the destination. Since day one, we've told Lite Account users the same thing: claim your keys and take self-custody as soon as there's real value in the account. Our in-app prompts kicked in at just $10 to be (quite annoying but necessary) to remind you that you should claim the real Hive Keys and rotate them yourself.
A Lite Account is convenient. A claimed account is ** truly yours**.
What Changed
As a security measure, on October 20 all unclaimed Lite Accounts had their keys rotated - more than 31,000 unclaimed Lite Accounts.
- All four keys changed: owner, active, posting and memo.
- Your old Lite Account keys are retired. They no longer work. NEVER import or use them again.
- The new keys are held encrypted and offline until you claim them (process explained below)
- Your username, posts and followers stay right where they are.
If you had already claimed your keys before October 20, then you are already fine. Nothing to do. You were already in control, which is exactly why we've always pushed people to claim as early as possible.
Rotating keys is one of the most basic security practices there is. It also sets up a clean handover: when you claim, brand-new keys are created on your own device, and only you ever hold them.
Verify it yourself: every rotation is on chain. In your account history on any Hive block explorer, the key change sits in the same transaction as an inleo_key_rotation entry signed by @leo.voter.
How to Claim | Step by Step
Honestly, the flow takes longer to read about than to do.
1. Type claim.inleo.io into your browser yourself. Don't click links, not even ours. Not sure if your account is affected? Use "Check a username" on the home page.
2. Sign in the way you created your account. Google or X, in a sign-in window. INLEO only learns which account you signed in with, never your password.
3. Pick your account. You'll see the Lite Accounts tied to that sign-in. Hit Claim @youraccount. If you ever see a claim you didn't start, press This wasn't me.
4. Choose which apps can keep posting for you. Keep only the ones you actually use. You can change this later.
5. Write down your new 12-word recovery phrase, on paper. Your device creates it and it never leaves your device. No screenshots: phone photos often sync to the cloud. You can also download a recovery file and a password-locked keystore file. The keystore plus its password is how you log in at inleo.io from now on.
6. Prove you saved it. Type all 12 words back (pasting is turned off to protect you), or upload the file you just downloaded. Then sign in once more with the same Google or X account to confirm it's really you.
7. Bookmark your status page. Only your public keys leave your device. Your new keys go live at our next processing run, usually within a few hours. Accounts worth $100 or more wait 24 hours, for safety. You'll get a memo from @inleo.claims in your wallet, and it NEVER contains links.
When your status page says "Done. Your new keys are live," you hold the only keys to your account. INLEO can no longer access it.
Claiming is free. @inleo.claims covers the transaction costs.
Four Rules
Scammers love moments like this. Fake "airdrop" and "Hive notice" accounts are already active on Hive. So:
- Only claim.inleo.io is real. Type it yourself. Any "claim" link in a DM, comment, memo or email is fake.
- INLEO will NEVER DM you first, and we never ask for a key, recovery phrase, password or payment.
- Your 12 words are yours alone. Anyone who has them controls your account.
- Never use your old Lite Account keys again.
Good Security Habits After You Claim
- Keep your owner key offline. Using Hive Keychain? Import only your posting and active keys.
- Know your recovery account. It's @leo.voter. It can help you get back in if you lose your keys, but it can never take your account on its own. You can pick a different one later on wallet.hive.blog under Keys & Permissions.
- Back up offline, in more than one place. Your phrase and keystore are the account now.
Need Help?
Ask in tech support in the LEO Discord. We answer there, never in DMs. If someone "from support" messages you first, they're a scammer. There are known scammers going around and stealing funds from people who click phishing links. Don't be one of them.
Self-custody has always been the point of Hive. Your Lite Account got you in the door. Claiming turns it into a full Hive account that's 100% yours.
Claim your keys → type https://claim.inleo.io into your browser
Onwards 🦁
Posted Using INLEO
