Came across this awesome post today at http://www.xkcd.com/936. Harilo encrypts all your passwords so even if our server was compromised (which would tough since the only way to do that would be to get access to a dev's ~/.ssh/id_rsa file or be able to break the OpenSSH protocol in which case there's probably a bigger and better job waiting for that person at Google or the CIA) your password would still be safe which is important since most people use the same passwords on multiple sites.

So as per the infographic what you should worry about is having a weak password that is easy to guess - so choose an intelligent password, for Harilo and other sites that you use, and stay safe everyone!