is by using complex passwords

is to encrypt the entire login transaction using something like SSL

is by not using public/shared PCs

is by sending credentials by POST method