For high security accounts like online banking, you should change your password every three months. Thefts or losses resulting from the disclosure of a private key could also go far beyond an individual before the court.