64-bit encryption is only used for accounts that have no public key and haven't done any transactions. It is recommended to make public key and do at least one transaction. Send someone some NXT, buy an alias, basically I think any proactive usage of the account gives 256 bit protection