A few tips for you:
- Make your password above 8 Characters
Make it alpha numeric
Dont use a program, just press keys
Change it every month or so
Like hybrid says, nothing is secure now, I would say you are only really safe if you are sending your password over an SSL Connection (Secure Socket Layer). This means that the data is encrypted, you can tell this by their been a padlock in the bottom of IE and in the address bar instead of http:// it will be https:// .
For some reason MSN and Yahoo etc do not do this, recently on our servers we purchased an SSL certificate so that when our customers login to cpanel its sent over a secure connection