You are absolutely right, we have to store all passwords offline, because hackers are now more powerful, they are not stupid people, even we are more clueless than them, they may be graduates from a computer university and who knows that they can even hack national security , let alone just a small account like ours.
Offline storage is always better and I hope we don't get involved in something like this, good luck for your entry friends....