This means that there are two people knowing your key: You, and the online wallet service. Unless you trust it 100% (which would be dumb): Create a new key known only to you on a secure machine and transfer the BTC to that key (address).