To avoid theft of tokens, if you can afford it you should by an hardware wallet like ledger and the likes or you can save your private key offline and then scramble the letters and numbers in such a way that you can easily remember it.
If you are using mobile phone, then you can use Imtoken app.
Better save json or private key for seccurity??