If you receive a notification about a suspicious login attempt or your details are involved in a data breach, then you should change your password immediately. In other scenarios, changing your password roughly every three months is considered bet practice. However, most people don't commit to changing them that regularly.