What about phishing and malware?
>
Your passwords are at risk from a variety of sources. Hackers can try ‘brute-force’ attacks to try to crack easily guessable passwords, but thieves more often attempt to trick you into revealing your passwords. Fake – or ‘phishing’ – emails is one major tactic: never click links in emails to log on to accounts. Also install anti-virus software to protect you from malware such as keyloggers, which capture keystrokes to reveal sensitive information such as email addresses, passwords and credit card details.