Comment by gupi

I would also recommend using two-factor authentication (see services like Duo or Twilio's Authy) along with password-protected keys.