He should be safe but you should never solely rely on these things. I'd also scan your computer for malware and make sure you don't have a keylogger first, because if you do changing your password wont do much good as they'll immediately know it.
That is a pretty good point yeah. Should have included that in my original post, my bad.