For banking, email and Facebook accounts I always use a secure HTTPS connection AND 2-factor authentication. It means I must have my mobile with me at all times and I take the extra precaution to ensure the SIM card and the handset are both password-protected.
I have also started to use HIDE MY ASS VPN service to ensure that ALL traffic is encrypted - at least between me and the HMA server; this includes ALL internet facing programs, such as browsers and Instant Messengers.
You can never be too careful!
