Privileged passwords should be rotated regularly as part of security best practices. The frequency of rotation may vary but is typically done at regular intervals, such as every 90 days, to minimise the risk of unauthorised access.