blotunga: Passwords can be spoofed. There are keyloggers or other means of getting them. I prefer 2FA
elendiel7: Yes, passwords can be spoofed, and you could have a keylogger installed in your system. In the event that you do have a keylogger installed on your system, I wouldn't hesitate to state that your security practices are ineffective and your online accounts were bound to be cracked regardless of any steps you may have taken.
I just wanted to stress optional. Security is at your own discretion and I have found that I am content with my method in the present time.
You are connected to the Internet so with all sane precautions still vulnerable. You can remain ignorant, but do you think if
some groups can infect hdd firmwares for example, nobody else can? I think a healthy dose of paranoia is better.