If you have them on coinspot and coinspot is hacked there will go all your coins, possibly.
Any exchange, even one like say coinbase, gets hacked almost daily, actually that's not 100% right, the wallets used within coinbase and others gets hacked.
What you are doing is allowing a third party ie: coinspot to hold your private key, and you simply login with a password to see your coin totals.
This is all well and good, but you are solely relying on coinspot to a) not steal your coins themselves, not get hacked themselves and hide your private key well enough to not be seen by hackers.
YOU should not trust any online wallet with your digital currency assets.
What some hackers are doing is getting your contact email and or phone, then using 2 stage authenticity, changing your password on say coin spot, and taking your mobile number at the same time.
You should IMO use a cold storage or "away from the internet" wallet.
Anything connected to the internet is not safe.
PS: Coinspot accounts have been hacked numerous times.
Check internet for reviews, coinspot is only been around for 6 months after going offline for a while, and is operated by one sole trader, not a company, and not registered for GST.
and This on privacy form...From time to time, we may use customer information for new, unanticipated uses not previously disclosed in our privacy notice.
Be careful.
http://fortune.com/2017/09/29/cryptocurrency-exchanges-hackings-chaos/
https://techcrunch.com/2017/09/18/ss7-coinbase-bitcoin-hack-2fa-vulnerable/
