The value of digital money is huge. So You should not let anyone know your wallet password and wallet file. You have to be careful with phishing sites.
No wants to give away their personal details to others but scammers are very smart to steal things from common people.
If you can afford to buy hardware wallets then it will be the best option to protect you but if you can't afford then on the PC where you usually login into any of the online wallet don't download unnecessary things on that PC and use good anti-virus software to protect your PC from unknown viruses.
It is true that a very good Anti-virus software will protect you from unknown viruses. I almost got phished yesterday,if not because of my kaspersky internet security which i configure to help me monitor my some site like myetherwallet and other exchange that i used. Immediately i opened the link from my email, it got blocked by my antivirus but later i allowed it to know what is happening then i saw it is phised website that want me to enter my wallet id for a 5000 token. I insert my wallet id and as i click submit, my antivirus blocked it again and report it the site as phised site.