Make sure that you use long, not easily identifiable passwords, using a mixture of different characters, including upper and lower case. And never reply to an email asking for a password or log in ID from any company that you do business with. In fact, most, if not all of the companies that offer online bill paying state on their sites that they will never ask for any personal information from you by way of email.