On financial websites, I change it once every couple of months or when needed. On social media, hardly ever unless I learn of some hack. There are other websites I haven't changed the password in so long I don't even know it. If I access those sites, I almost always have to reset my password because I have forgotten it.