Most internet users seem to create one password and never change it.
For online security, particularly avoiding hacks or unauthorised access to your accounts, you should probally at the bare minimum change your passwords every 1 to 3 years.
Note: If you are more dedicated you could amp it up to every 1 to 3 months.
<