I think you have to assume that any public computer has a keyboard logger or some other way to nab your information. I saw recently there was a Firefox plug-in that sent data to a remote server. Who knows what other kind of stuff like that is out there?

Google has a two step log-in verification process such that even if someone nabs your password, they still can't log in unless they also have your phone.

http://support.google.com/accounts/bin/answer.py?hl=en&a...


I've heard of programs that store all your passwords on a USB. The program then populates the password fields of your various websites. That foils keyboard loggers. Never used such a thing, but it sounds like a good idea.