Assume all passwords are compromised. No pvt key material online, ever. Analog with signing devices only.