Hmm, I am a victim of your post with my first steemit account @emmakwisequote. That account was hacked and stolen from me for up to five days before I was able to access it. It's a pity I later lost that account in February as a result of my damaged phone.

Changing your password often is good, but ensure you keep saving it where it is secured. I changed mine after I recovered it from the hackers, but I forgot to save the new password in a save place, so when the phone got damaged, I lost my password with it.

Now, I don't just change my password, I also save it in a secured place each time I change it.