Leo says some viruses have keystroke loggers built in that "phone home" with your passwords, but it doesn't look like Babylon does that. If he's worried, though, then he shouldn't take a chance. He should change his passwords regularly. Leo also advises using LastPass, which will generate passwords that are impossible to defeat. Then he'd only have to remember the LastPass password.