Bitcoin Forum

Yesterday my Myetherwallet hacked and balance Ethereum amount transfered to other MEW.
I backtracked the transaction and found there are many hundred wallets whose amount was also transfered like from my account.
Why Myetherwallet security is too weak?
 Any other ERC20 Wallet?
Give your opinion so that other fellows may be benefited.

Did you use a ledger or other hard wallet with MEW?  I think if you get one of those you should be good to go.

The security of Myetherwallet should be good, I use Imtoken light purse, if you need to pursue more security, then use the hardware wallet.

The same incidents I listen from my friends so many time. Myetherwallet administration is not upgrading security features. There should be authentication on each transaction.
A new ERC20 wallet is coming soon with advanced safety features. names as LivesOne www.lives.one.   Our group decided to transfer our all Coins to new wallet.

Your private keys must be stolen that's why your funds are moved, otherwise its not possible, Mew is just a tool to sign transactions.

Sorry to hear that. That said MyEtherWallet is as safe as it gets. It all depends on your own security practices. Did you or did you not download MyEtherWallet and used it locally? Did you or did you not use MEW in conjunction with dedicated hardware wallets? Did you or did you not use MEW in offline computer/online computer setup? Did you or did you not store you private keys on network connected devices? Did you or did you not sign transactions on network connected devices? And list could go on and on... It's not easy to be your own bank.

Thank you for writing here on the topic. Without private key it is not possible to transfer funds. But if there is second authenticator for transaction than private key hackers can not cheat.

How it was hacked? Have you uploaded you private key at some fake site? Mew cannot be hacked it is only members providing there private key somewhere online. I do agree they need to increase security features, atleast they can introduce 2fa or email login.

No, if you use UTC file then hack is not possible, UTC private key is encrypted with strong password, hackers cannot crack that password for years.

Hack is possible when you unlock your wallet with private key, do not use private key on mew, always use UTC file which is password encrypted.

Better order yourself a hardware purse-Ledger Nano or Trezor. Safety in crypto currency is more important than all. So order it yourself and your crypto currency will be safe.

I do not think the security on the Myetherwallet wallet is weak, you should be more accurate. Most of my ERC20-based tokens are kept on my MEW wallet and I feel very safe. It's a good idea to save the UTC and private keys carefully and do not let anyone steal, I'm sure your assets are very safe. You should be assured of the MEW wallet because it is used extensively throughout the world.

Thanks for providing a lot of methods for securing MEW. But if there is any other 2nd  authenticator in addition with Private key we have no need of additional combinations for the security of MEW.

MEW is just a tool to sign your transactions like Electrum, Mycelium or Bread wallet, you hold your private keys in your PC.

Bookmark the MEW site, looks like you used any phishing site.

So normally mew is very secure. What kind of authentication did u use? If you use Key file and you store this file on save PC there can normally happened nothing bad. In most cases people are scammed by using fake mew Domains. Looking similar to the original one.

Dear friend, I was having the same views before my wallet hacked.

If someone has your private keys, he doesn't need MEW to stole your funds. He can use every Ethereum wallet there is. Having two factor authentication on MEW wouldn't help you in any way.

Security is week because it is an browser wallet + you have probabbly used windows or mac. Since windows is the msot used OS out there you can get viruses much easier. When I need to use MEW I do so on my live OS linux. Live OS means that you run your OS through USB or CD and your system is only loaded into your RAM. Therefore I always have fresh system that I know for sure there are no viruses of any kind before I even think of exposing my private key.

As others have stated hardware wallet might be your best bet here.
Never use your main computer (or OS) for security related things, spcially if you haven't cleaned your computer for a while, who knows what might be in there.

Hopefully you haven't lost many coins, but avoid to save your private key and to to your computer if you did this. Bascially even when you don't use MEW if you have file stored somewhere on your computer hackers can potentially get to your private keys.

you must remember MEW its not bank, just wallet, my suggestion if you have money dont you keep for long time better you send and withdraw thats money

this list wallets
Blockchain.info for bitcoin
MyEtherWallet for ETH and ERC20
Jaxx or Exodus for multi-coins wallet.

and you must remeber to always clean you PC from virus, and add antivirus internet, and the last dont using public wifi

To explain a bit further: your funds are not stored on MEW. The balance of each and every Ethereum account is stored on Ethereum blockchain. How does blockchain know who’s an owner of account? It doesn’t know that and it doesn’t care about that. However, consensus protocol won’t allow you to spend funds from any Ethereum account unless you signed transaction spending those funds with a private key corresponding to a public key, whose hash equals to an account address. Since blockchain itself doesn’t have any other security mechanism, there’s no sense in implementing it in MEW.

Use Metamask or Ledger Nano to add more security. Always be aware fishing websites. Bookmark MEW website and use only this bookmark.

Yes, he must have used fake site or someone just stole his private keys.


I suggest you to install Malware bytes in your PC and set on a daily scan schedule. It will project you from malware and ransomwares.

What about exodus, eidoo, and jaxx but all of them mobile platform wallet. My guess you have been putted your address into the physhing site and makes scammer can steal your privatekey and then drained all of your amount. You can try to store all of your coin in the paper wallet and never try to put it in anywhere, or just try metamask for a better security.

I agree to you, they need to upgrade their system. Im sure it is possible to add 2fa or email login, also they can add IP restriction. This days a lot of MEW account already hacked an I am also afraid now with other sites who is asking private keys to trade in their trading sites.

Yes it is too much horrible the security of Myetherwallet is too weak and hard earning of innocent people is stolen by  someone else frequently. Now it is required by the admin to enhance the security of the site for the health of this platform'

If you're worried about the security of your tokens, using a hardware wallet is a good choice. I recommend Trezor.

Well MEW is just a wallet, but I believe that hardware wallet remains the best.

Most of the facilities with MEW purses are being stolen because the wallet owner somewhere has lighted his private key from his wallet. Because of this, 99% of thefts occur. If you do not light your private key anywhere, then you do not have to worry.

There are several wallets that support this standard
-MyEtherWallet is an online wallet, which is the most popular etherium purse that supports the ERC 20 token standard.
-MetaMask is made as a plug-in for the browser (Google Chrome or Mozilla Firefox), which can be synchronized on another device by importing your password
-Mist is the official purse of the Ethereum
-Parity-To date, the reputation of the purse is very negative
-ImToken is an application for mobile devices (support for Android & IOS) from Chinese developers.
But personally, I want to entrust my savings only to the hardware wallet

You described the other options for security of ERC20 Wallet. The information is very useful and valuable .

Hardware wallets are the way to go with crypto, but if you are looking for a secure software wallet I would suggest BLUE wallet.
It is still in beta but it is the most secure wallet out there.
It has a partnership with 0x so in future you can swap tokens there.

https://www.etherblue.org/wallet

The security of your wallet totally depends on you. If you lose your private key you lose your wallet with everything in it. So never use your private key in other computer . And if you want high security then a hard wallet is the best for you. It has more security and always stays with you. Some good hard wallet are Trezor and Ledger.

Im sure you got phished,myetherwallet is very secured and you didnt use metamask thats why your private keys got compromised,its your fault not MEW's.

I hope you did not place your private key in some clone website that promises to give you an airdrop from a popular ICO. No airdrop or any ICO will ever as for your priv keys. If it does, it's a scam!

I am publishing the MEW address of the Thief who stole my ETH, not only my ETH there are so many other fellows like me. See a number of incomming transactions are pending in the account.
https://etherscan.io/address/0xb6aac3b56ff818496b747ea57fcbe42a9aae6218

He looks professional hacker.

The DNS was never hacked and people are all spreading FUD. It's sad to see that many people visited a phishing link after getting warnings from the website as well as from other portals that never to visit such sites or click on unknown links. They mentioned this on their twitter account as well.

You can always disable Internet and send offline .

There is no doubt your private key has been hacked or stolen. But I want to suggest that MyEtherWallet  should introduce to change the key of wallet by the user.

This is very good idea, if the private key of any body has been compromised than he/she will be able to change his private key using the same password used at the time of creating new wallet.

I haven’t longer worked on myetherwallet after the hack attacks on this. For now the wallets that I use are Ethereum wallet and Coinomi. The first wallet as you know for ETH and the second for altcoins.

Is it true MEW is not secured? Please give suggestion what wallet should I use now so I can transfer my tokens of safe wallet. Thank you.

I think you should use private browser or metamask to protected your wallet, maybe you should jaxxx

most likely, your keys have got to the intruders, to prevent this, you can use the offline version of the wallet on a new computer without an internet connection

You better use metamask to have so much security on your tokens as well as your ethereum myetherwallet right now are have so many same domain sites and do phishing on our private

the attacker has access to your keys, try to protect yourself as much as possible use a hardware wallet

I believe you can have a look at FreeWallet. Use it for three month already and never get any problem. Saved a bunch of money on fees. For ETH no problem. But it's not that good for little cheap coins, because the system does not always cope with the load. But support solve problems fast enough.

For the past years im using myetherwallet, i never encounter loss coins or ethereum same goes to my friend who are still currently using myetherwallet. But if you really want to have tight security, buy hardware wallet and make sure you Hodl the coins inside it.

How do you log in? Did you use PV key? if yes, you may have a problem with spyware. If you log in using JSON file I think it is much safer. I used to loose rlc token for more than 1000 USD. I used PV key to log in. If you are not satsfied with mew you can use metamask.

 he maybe visited a clone/phished site and he didint notice the correct spelling of the site before he inputs his private keys then as a result his wallet had been hacked. im also a user of myetherwallet a long time ago up until now but so far i didnt experience getting hacked or phised because i just already bookmarked the official site of myetherwallet for a much secure and faster access. using a metamask and json file is also a good way to avoid getting hacked.

I agree with this. You should always use hardware wallet for maximum security. mew doesn't store your private key, it's said on their website as you have to download it yourself. They have added more sign post ever since people started losing their tokens. Also, make sure you don't use phishing site. check the website address

Dear friend please see the post just above to your post. Very good information provided by the Sr. Member that is "I haven’t longer worked on myetherwallet after the hack attacks on this. For now the wallets that I use are Ethereum wallet and Coinomi. The first wallet as you know for ETH and the second for altcoins."

I also start to work on it. it is a very good and safe combination.

is there any risk in sharing MEW wallet address in forum?

I don't know how that can happen to you. I myself have never experienced what happened to you. I guess you've been negligent and mis-shared the mew address, but the private key you shared. try check and check again.

The information provided by you is very useful and valuable. I downloaded both Ethereum Wallet and coinomi and start working on it.

Thank you for attention on the topic and valuable suggestion.  

That etherscan address you provided is insane

"ETH Balance:   8,925.055347501305272123 Ether
ETH USD Value:   $10,985,136.62 (@ $1,230.82/ETH)"

This is consider a huge amount there and i assume its a wide and massive hijack, phishing site, or keylogging.

Anyhow, did you successfully find out the reason behind this issue?

personally, I still don't believe it that it was hacking/phising kind or anything like that happened to akmittal. the amount is so huge and so many addresses. for me it's just 2 possibilities. it is exchanger or it happened only in MEW itself. I don't believe it is about hacking or pishing or something like that happened to all of the users computer. it is exchanger or it is MEW the only one that been hacked, not the users.

True that, he must be telling his private key to somebody or wrote the password on the piece of paper and then lost it.

I am confident that MEW is safe from the attack as all my friends that i've guided them recently on taking the security measurement are safe from this hack.

I would say this is a large scale hack so yeah, but how?

Even if we talk about exchange, exchange doesn't require us to provide them Keystore Files/ Private key.

The most likely case would be the Etherdelta DNS Hijacked previously, or all of these user got injected with some sort of keylogged file. Guess we will need to wait OP To answer some of these questions.

To OP
1) Which exchanges you used recently?

2) Did you download anything recently?

3) What have you done on the same day you got hacked?

Actually MEW security is fine but you may have some keylogger or something else in PC you logged in and you keys may be captured if especially you logged in with your private key

I would advise you to install the official MIST wallet on your computer. But it is so cumbersome that it starts devouring all free resources. There are often problems with synchronization, but it would be forgivable if this purse did not absorb almost all free RAM (I have 16 gigabytes)

Myetherwallet is secure if we secure our private key from any phishing attack and try to login your account with your utc file and password as that file is not accessible without your system and that cannot be cracked. Myetherwallet have to apply 2fa to authorize each transaction then no transaction can be done by other person without your consent.

I am confident MyEtherWallet security is good.
To me looks like your private key was stolen.
Keep your key safe and be very careful not to go on fake site and will not have problems like that.

What you need to do is hide your private key. If you need it you can write it in your wallet or in a book at home.
Watch and attention phishing sites. You will not have any problems unless you fall into their trappings :)

I am fully agree with your experience and knowledge.  But one more thing I would like to know. If my private key is stolen or hacked, what should i do to save our coin.

There is nothing like 'myetherwallet security is too weak' myetherwallet is not keeping your fund. You only use myetherwallet as UI that interact with ethereum blockchain
Guard your private key with everything you've got and you should be ok

Myetherwallet security is NOT weak but using an unencrypted private key is generally a bad thing. I can think of several other scenario that a MEW user can lose his funds that wasn't phishing.
Keyloggers, malware, leaving your private key in a physical location for someone to find, remote access to your computer via software like TeamViewer, interception of the key when it was copy/pasted, etc. The keystore file is a slightly safer option whereby it is the private key that is encrypted with a strong password of your choosing (the password that you entered when you generate your wallet). Hence, even if you lose your keystore file, there is still a hope that the attacker will not be able to crack the file and access your wallet.

myetherwallet security is never been weak or strong it all depend us users how we take care of our private keys your computer probably had a virus you should store your coin in a usb storage like ledger nano s its designed to store btc , eth it will cost you money if your gonna buy one.

All the same, the security of the online wallet is lame, or simply the non-attentive user has switched to an unnecessary link. It would be nice, in addition to the private key to come up with additional authentication methods. Disadvantages are also obvious :P

You should import your MEW wallet into MetaMask. There is no way they can steal shit from you then. Its even recomended on the MEW website. Try it out, its really easy to use aswell and switch between diffrent wallets.  :) :)

when i say exchanger, i didn't meant it about keystore files nor private key. it was about the massive transaction on the link he provided before. so many transaction with same address is look's like an exchanger's transactions. if it was a real hijack, so I will say it is mostly because of using free proxy or free vpn.

I agree with you, I don't think that the security in Myetherwallet is too weak. Users should save their private keys and be careful about it. If you guard it carefully, you should be okay. My ether wallet is one of greats wallets that you can save on it your altcoins, I have used it for a long time and I didn't have any problem with it until now.

I think the MyEtherWallet wallet is one of the simplest and most reliable purses in terms of its security. His secret key is quite large and can not be opened. The burglary of this wallet is almost always due only to carelessness and mistakes of the users themselves. Therefore for me it is not clear. that means "the purse is hacked." More detailed information on this is needed. otherwise it is impossible to discuss this situation because of its uncertainty.

After loosing the key of MyEtherWallet. I would like to suggest my friends. Always add or change some characters of Private key and keep remember them. Do not put your Private key on Working computer. Original key should be saved on offline device.

However all these problems may be short out if MyEtherWallet update  login security similar to WAVES and Blockchain.

The same incident happen with my two friends who loose above 1ETH each by the same way.  The hacker is not touching any coin in the etherdelta by using the PK. In my view the key is hacked from the server of MyEtherWallet. Other wise there is no way to steal too many key at once.

I agree with you, MyEtherWallet should think to make 2FA for make sure their user's wallet are safety. Because, if the Private Key leaked, just say goodbye on it. And, i want ask to you all, are using JSON method and put password is more safety that input Private Key?

MEW is just a platform for you to access your ETH. Did you leak your private key somewhere? If you want good security, then use a hardware wallet.

Today you can find a number of wallets that allow you to keep Ethereum.No not all users have the resources and capabilities to store the full chain of transactions, for example when using Ethereum Browser, Mist or any other solutions of a full-node wallet.
Many users note the high convenience and security in the process of working with MyEtherWallet.

IMPORTANT! Don't forget to save your secret key when creating a new wallet account.
Keep them OUT OF THE PC  not just on your computer!

this is correct and yet that it was always may depends on the user on how they may able to handle this kind of situation for cause this is the common thing that may happen but some are in a good way of it so for me also that the way on how does this kind of scenario may happen may depends on the user.

I do not agree that it is necessary to strengthen the security of the MyEtherWallet wallet by introducing two-factor authentication or by other means that will complicate access to this wallet to their users. Now this wallet is convenient and easy to use. They are convenient to use from a mobile phone or other device. If there is an introduction of two-factor authentication or binding to something, it will make it difficult for users to access. Who wants to enhance access security, can choose another purse. In MyEtherWallet is quite a complex digital key, which is unrealistic to crack. The only problem is that other people do not use this key, that is, the problem is not in the wallet itself, but in users who neglect the security rules when working with a digital key.

MyEtherWallet is very simple to use and this the main reason of its popularity. But security is the most important thing. Without security all coin may go in one-time.
On etherDelta we need to put PK and Address is this safe?

I think these accusation was made to be true because there are really many cases that MyEtherWallet are vulnerable to hacking. I encountered an issue about this one that one wallet from other Ethereum wallet that isn't an ERC20 supported is the same as in the MEW wallet. I don't know which one is the fraud or the correct one but I think it seems MEW isn't a reliable wallet. I would like to suggest to use imToken if you are using a mobile and if it's on a computer then use Metamask or Parity they are the best I would recommend.

Well you are right, MEW protection is very weak. From the first until now I never use other wallet than MEW.
I use additional security with TREZOR. That way I never save a single token at MEW.
TREZOR is a hardware wallet, you can save the overall token you have on move from MEW to your hardware wallet, I am sure your MEW account will be safe from others.

It isnt mew's fault its yours you probably didnt intall metamask,im sure you got phished by these phishing sites.

exodus wallet is very good, it accepts all erc20 compatible tokens so very handy indeed, also looks very nice too lol

It's not that the security is not good, maybe it's just you who clicked on some random links or entered your private key in phising site, you should be more careful in crypto and double check the site before entering your private key. You can try metamask or if you want a better security then you can spend some money to buy hardware wallet like ledger or trezor.

I agree, putting private key on mew page is very risky now. For alternatives, you can try metamask first, and then connect to MEW. Another new secure erc wallet, you can try Blue Wallet (https://www.etherblue.org/wallet)

Its not the fault of myetherwallet its your own,you didnt install metamask extension probaby you got phished,ive been using mew from the past 2years and i didnt encounter any problem using it.

Dear Friend,
I am also using MEW from last one year without any trouble. But on i very rarely used MEW login. Etherdelta is used to trade and transfer the tokens.
On EtherDelta you need only private key and public key. Than How MyEtherWallet is safe, who allow access to other websites with PK only.

I think there is a centralized hole in the system otherwise so many people can not loose their Ethereum. Moreover the hacker transfers only Ethereum.

I generally use imtoken light purse, and there is no issue of security,
If you want your token to be more secure, then I recommend you use a hardware wallet because it looks like the hardware wallet is relatively safe.

although the security of My ether wallet is too weak,but My ether wallet remains the Most widely used by all bitcoiner,and I also wear his because of the system its use in my opinion is very simple and not complicated.

it is true that security in Myetherwallet is quite easy to break into as it happened to me. I lost my token and my Eth bit.

ledger and jaxx are good options.metamask is also a good choice.

EtherDelta is a decentralized exchange that works with smart contracts on ethereum network. Thats why fees could be a bit higher than on other exchanges, so far I consider it to be "safe" place. For security purposes you may want to have one address that you will use only with Ether delta so you don't expose private key from you main wallet.

Can you give some details? It's too vague to say "my account was hacked", may be it's simply your fault.
I'd like to know, because all my ethereum addresses are on MEW, and everybody assured me that it's very safe.

Sorry, I just read some posts, and actually I'm a little impressed.
If really so many people had problem may be there is something wrong with the system.
But please let me know, because I'm not an engineer: if my private key it's kept hidden, how is it possible to hack an account, as anyone says that cryptography is 100%?
Where is the weak point?

If you unlock your MEW using privat key or a phrase then it's not secure at all, but you can do it using Metamask than it's totaly safe. And more of it, you don't need to use MEW at all, everything can be done in Metamask. You can send ETH from there or add custom tokens. So just use Metamask and you assests will be safe.

I am sorry to heard that, to store token ERC20 except myetherwallet i used enjin wallet for android Platform, it is support for token ERC20 too, you can check this https://play.google.com/store/apps/details?id=com.enjin.mobile.wallet you can learn more about it before you try to use it because however enjin wallet is still new service, if you are doubt in it i don't recommendation to use it, in my personal experience it is save to be used.

You're could you say it's too weak?
Maybe your using unsecured network or your computer hijacked and compromised by virus etc.
Myetherwallet is totally secure and you can read that in their website, and it's your responsibility to secure your wallet keys because the security issue isn't them (mew) but you.

I agree, Myetherwallet is totally safe unless you let outsiders lurk your personal computer.
There's nothing worthy with your wallet but I think your computer was hijacked and it began when you hit those links that will going to infect your computer and then that hijacker is living in your computer's, memory and when it detects wallet keys and passwords then you're dead! Your assets will be dead as well.

Well you can use Jaxx, metamask or Exodus but the one thing that can save you is bookmarking the right myetherwallet, myetherwallet keeps improving their security you can see a lot of reminders before you can login to your account, so how's that.

How did it happened? I bet you were keeping your password in googledisc or another cloud and your URL file on the desktop.  :)

I was mainly using MEW to access my wallet until there was a time I heard so many hacks to people around me which scare the shit out of me. Finally I made a good decision to preorder a ledger nano because it is quite difficult to find one here in my country. And it feels even better knowing ledger is not shipping any ledger nano until march. Lucky me to have one before that happen ;D

Usually people like to use MEW over other wallets because it supports all tokens. For me, I create a wallet on Mew and import the private key to Metamask. on daily basic I use Metamask and for tracking my tokens I use Mew. in this way I avoid type the private key everyday.

I don't think so. The security feature of Myetherwallet is very safe and the provided private key is encrypted with combination of different letters or digits and which is not possible to broken by anyone. This is possible only in one condition if u write your private key openly on your system or by mistake u write it on some site or your system could be hacked. Second i think u always working on normal window. If yes, then don't do again. According to me, u always working on incognito window where no one trace your work and after finishing all your work. The all data, password, caches while erased automatically. Which let u free from these types of hacking problem.

This is not the matter of batting, This is purely Scam by MyEtherWallet or EtherDelta employee. Moreover i know the internet safety norms no such mistake is made as you mentioned in you post.

I dont think Myetherwallet have low security system, it depend on how you access to yours wallet.
They have multiple option and "Keystore / JSON File" is the best option to get yours wallet sercue.

I'm sure that MEW is protected seriously enough, although of course there are no perfect systems, but still from the number of services offered on the market, I believe that the MEW is a completely safe way of storing funds

Also they add the meta mask feature, wherein you add log in through metamask. With meta amsk I think its more secure as its another layer layer of security with encryption, that is you dont have to copy paste your pvriate keys anymore.I am using metamask and its easy to handle it, its convenient too.

so far I've never had a problem like you. I do not see the weakness in the MEW wallet system, every time the developer always improve its security system. one that I learned from many theft cases, firstly, due to wrong carelessness in filling the wallet address, and shared private keys, secondly, the weakness of your computer system, easy to penetrate by viruses such as torjan or phishing. I guess that's it.

I don't think myetherwallet.com is that safe anymore, more so that mycrypto.com has separated from it and is a stand alone now. Then coupled with the recent DNS attack which caused some wallet users to lose their tokens to hackers,  it's time users found better wallet. I've been using Imtoken and EIDOO without any problem. I think Trust wallet is a slow a good candidate.

Possible that your private key on the wallet has been breached by a phishing attack. Make sure that you visit the correct url in myetherwallet. It is also secure when you use metamask to access your myetherwallet to prevent it from any form of attacks. But if you want other wallet, you can try using imToken, its an android app, that lets you manage and stored erc20 wallet and many other.

Well For now i think many people in this group use MEW as their wallet (especially for bounty hunter) because MEW has ERC-20 standard which is used for the token transaction. I usuualy used Private Key to login to MEW not using keystore, because it’s more secure (i think), when you used keystore you just have to upload to MEW right? And i think it’s not secure

I think myetherwallet is still safe for me to use but if you are not too test myetherwallet you can use metamask and some other wallet that can receive the token ERC20.

Ledger Nano S, this is the best wallet, because your money can not be stolen. The Leader Nano S and Trezor, which have built-in support for Ethereum, will not require firmware updates to support future ERC20 tokens.

if you lose the token in myetherwallet there are two causes you first register bounty and you enter your private key in the second form is your device there is a mallware who can copy all the data you wrote and this is often experienced by my friend

I disagree with you. If you use MetaMask everything should be fine.
In case like yours usually people are not very careful with their own private key and that is how the problems start.

as long as you use Json file and offline version of MEW, it is quite safe

in order to use offline MEw wallet, you need a computer without internet...it will be your cold storage

then you will do your transfers from your online computer by using offline transfer feature at MEW website

My ether wallet very nice free wallet.. And in terms of security, it is not necessary to leave the key on the computer, store it on a flash drive and nobody will crack