What about phishing and malware?

>>> Your passwords are at risk from a variety of sources. Hackers can try “brute–force” attacks to try to crack easily guessable passwords, but thieves more often attempt to trick you into revealing your passwords. Fake — or “phishing” — emails is one major tactic: never click links in emails to log on to accounts. Also install anti–virus software to protect you from malware such as keyloggers, which capture keystrokes to reveal sensitive information such as passwords and credit card details.