how to change a password securely

Security experts at the UK’s National Cyber Security Centre recommend three steps for password security: use a password manager to generate and store unique passwords, turn on two-step verification (2SV) wherever it’s offered, and change passwords only when there’s a specific reason — not on a fixed schedule. Contrary to older advice, forcing users to change passwords every 90 days actually encourages weaker, predictable passwords. Instead, change a password immediately if you suspect a breach, shared it with someone, or used it across multiple sites. A good password manager (Bitwarden, 1Password, or Apple’s iCloud Keychain) can auto-generate strong random passwords and alert you if any of your saved accounts appear in a known data breach. source: NCSC password guidance and Authgear security blog