I am glad it only took a loss of 0.01 to learn the lesson and not thousands. DO NOT USE ONLINE WALLETS!!!!! I mean it from the bottom of my heart and soul. Unless YOU are the only one with the private keys you are using to sign, they are not their coins.
Maybe its due to all the scorpio in my zodiac chart, but I do not handle the risk well of anyone else holding my private keys for any reason. If I transfer funds to my bitcoin debit card, I do it in small lots at a time. For long term storage:
Use either
1. If you must use online, a coinbase multisig vault, remember your passphrase and keep the paper backup of the vault safe. You still have control of the keys due to the multisig set up. Plus with the paper backup user key + shared key coinbase can use the user key to restore your vault without your passphrase by combining with their key (it is a 2 of 3 multisig). If they go bust, then use the user key and shared encrypted key outside of coinbase to move your coins. If they are hacked, they wont have your shared key due to the passphrase encrypting it which coinbase servers never see.
2. A ledger HW1 wallet (£20) keep the seed safe as its your backup, set it up on a trusted computer only! and no malware can get at the keys they are stored inside the device. The seed has saved my bacon once, treat it like a 'paper' wallet and have multiple copies stored securely.
3. A TREZOR Wallet (£80) same thing, with a screen authenticator
4. Electrum Multisig using a HW wallet to sign, or the 2FA electrum wallet.
5. A paper wallet (more inconvenient)
DO NOT FOR ANY LARGE AMOUNTS OF BTC USE AN ONLINE OR BASIC DESKTOP WALLET! I use a ledger wallet, I add the addresses as a watch address in electrum so I can just send money to it easy without having to plug it in and I only plug it in when I want to send funds from it, and use an electrum wallet for a 'hot' wallet.
Hardware wallets are the way, seriously. Even better than paper wallets in my opinion as you can store multiples with the same seed, and the seed acts as a 'paper' wallet in and of itself.
I beg of anyone reading this, hardware wallet. (Ledger, Trezor), I implore you! The more people do this, the harder it is for a hacker to steal hard earned funds... Do not use a black arrow hardware wallet, probably has a backdoor in it after what they did to their customers...
https://bitcointalk.org/index.php?topic=1455319.40Use of 2FA for exchange accounts, multisig vault in the case of coinbase and HW wallets (as I signed transactions while infected before I realized), saved my bacon, I am not kidding, for me it was so much money, money I later cashed out and used move in with my partner I am now engaged to.
I am considering asking the bitcoin core developers to add recommendations like this in the documentation, its time this bull ended now and it could be greatly reduced if such measures are taken, yes we shouldn't have to do it but it is better to do it...
I use a non HW wallet (electrum) to handle small amounts of daily change from the pool and every week or so I move it to my HW wallets. I use my same hot wallet electrum seed on both the mobile app and the desktop app so I have fluid access to my funds on my devices when I need it the most but I do not keep more than like £40 on one of these, encrypted with a passphrase! If I needed more and I was stranded somewhere, the ledger wallet can be used on any machine with google chrome without admin access if you can install the extension or with the USB adapter.