kamundu mayb rite,u cld hv a keylogger installed on ur machine,it records and sends all ur keystrokes and mayb even screengrabs to the attacker.so it bcomes pointles how often u change ur paswords or how strong they r,ur attacker gets tha 411.another possibility as u say:if u use the vpn for personal surfing then ur data passes thru ur employers network and it could be captured that way.some companies monitor all data even encoded data thru their infastructure in the name of preventn espionage n attacks,this includes correspondence.if u dnt trust em,split tunellin or not,dont use their vpn for personal use.

@kiterunner, the key logger doesn't have to be on your computer. It could be installed the network server. It logs all the keystrokes from all the computers in the network. Be informed that it may also be logging all your activities including which websites you visit and how log you stay on a particular website.

However, keyloggers have limitations. To cheat them, you can:
1. Enter your passwords in a mixed up manner.. eg if you password is kiterunner2012 type run first, next take the mouse and go to the beginning [click]run and type kit. Now you have kitrun. Go to the end and type 12. You will have kitrun12.... Continue till your password is complete. Most keyloggers don't capture mouse movements or cursor movements or delete. Try your luck.

2. Download keyboard scramblers. Try this Keyboard scrambler it will encrypt your keystrokes.

3. Install a good antivirus software.

My two cents.

Thank u very much.That is show I shall be login from today henceforth whether there's a keylogger installed or not.
But I like having saved pw.so this will mess me up.