yeah if you use online wallet he only need your password and if you use offline wallet all he need is to hack your pc it is harder than password but there is very skilled hacker that will do the impossible to reach there goals.