is a safe password enough to not get hacked?
lets say you have an account on MTGOX with a password that contains big and small letters
extra keys and numbers and is over 20 caracters long
is there still a chance getting hacked?
(except phising,keyloggers)
If you aren't the sole controller of your private keys, you don't have any bitcoins.
Do whatever is necessary to make sure you are the sole controller of your private keys.
Offline wallets. Paper wallets. Cold storage. M of N wallets. Multisig addresses.
There are many tools available. I like Armory myself.