The odds of a counterwallet passphrase being brute-force discovered are roughly the same as any Bitcoin private key being brute-force discovered.
Indeed this is not what to worry about. What to worry about, are trojans, rootkits, keyloggers, screen scrapers, nosy coworkers, etc.
Yes. And don't forget fishing. Never google "counterwallet" or you can end up clicking on a sponsored imposter. I learned my lesson after googling "blockchain" a few months ago - I am surprised that Google has not blacklisted this keyword by now.
Yes, it's a good idea to type it in manually or keep bookmarks.
Another security tip is to use a non-admin account in Windows. While this probably isn't 100% foolproof, it at least prevents important files from being accessed by malicious programs.
You think I am enough safe if I have and run in computer Malwarebytes Anti-Malware, Zemana Antilogger(free version) and Avast Free Antivirus? Need i some firewall also or is this all + windows own enough? I run webwallet sometimes in hostel,hotel, apartment hotel wifi with normal firefox...
Btw If i have save to my firefox gmail email passwords are there risk someone can get it if i use public wifi? If not think i lose my notebook. I don't have any passwords in email but still want stay safe