Actually so far, I'm still using online wallets and I know that it is very risky for the security. Although applying a complicated password and two-step authentication, the hacker is still possible to hack them. However, so far, I still don't have any idea to use the hardware wallet. Although it is safer enough, it is more expensive.
I only have small amount of BTC, that is why I still consider using online wallets.