nobody can steal your tokens unless you share or give your pkey to a wrong people or you are a victim of a malware infected site or phishing site