I'm going to second this. Online wallets are far too risky. Even with a legitimate site, it can be hacked, an employee can go rogue, etc. You're basically opening yourself up to a lot more risks than you would be otherwise. Unlike cash, which is FEDERALLY insured when in a bank, your BTC, if stolen/hacked/etc. is gone forever. Always keep it in your own possession at all times.