yeah if you use online wallet he only need your password and if you use offline wallet all he need is to hack your pc it is harder than password but there is very skilled hacker that will do the impossible to reach there goals.
Online or offline wallet are not that easy to hack as each and every wallet has its unique features which allows hackers to stay away from your hard earned coins.