Suppose a hacker got my BW credentials

@grb i typically just do it for my preference. my pw are all unique and with it 100 char long i moved it more to 6 months, but in security, it’s good practice to change it, maybe not as much as me. my threat model is pretty intensive. i typically go over and actually attempt to break in my own vault and see even down to recovery methods if i were locked out.

my general standard for pw is 35 char minimum even for the basic login and randomly generated username typically and a privacy email address for each account. ppl realize a pw manager is used for you to create long complex and random pw for each account, not to remember. you remember your master pw for bitwarden thats it, also waiting for a pw leak to change a pw is like waiting to buy a gun for self-defense until you had a home invasion. the goal should be to prevent not respond after something has already been done.