In your dekstop wallet there is an option to "encrypt your wallet" . If it is encrypted with password then even if someone steal your wallet.dat file it will be very hard to get private keys from it.