What nuances and secrets you know
If you are using an online wallet, then just keep your private key of your wallet and be sure that you are not going to send it or say it to anyone, because if that will happen, then you're doomed, though web wallets are not that safe enough for me even your private key is in the safe place, unlike the Hardware wallet that is more secure than this web wallet because it could be use Online or Offline.
Hardware wallet are mostly offline, and that what makes it safe from the hackers. You are just going to use it online when sending bitcoins to another wallet or to someone to make a transaction.