Passwords depend on your email service and if they use SSL. For instance Road Runner email does not use SSL. If the service does use it your login and passwords are mostly safe. The text/body of emails likely are not. Neither is your general web browsing (without https).