I am a subscriber on a yahoo groups list that got spammed, and we were all asked to change all of our passwords. I did change them all, including on this site.

Is there is a password hygiene guideline that you would recommend? Say, changing every X months? I would like to put a recurrent calendar event to remind myself of that.