Change password -phishing?

[Baron]

I received a message to change pw due to it being a year. I've actually never had a change before so I need confirmation the request was initiated by Eccie and not a phishing attack.

Thanks

[phaedrus]

Even if it was phishing - and my bet is it's legit - the always safe approach is to login and change your password on the site.

The way you get in trouble is when you use the link in the email and don't notice it goes to a phishing site instead of a real site.

[ck1942]

Given that many of use use multiple devices to access many different websites, it is always a good idea to switch passwords periodically. Or use a very secure "password manager" software package.

Thing is, there are so many ways for malcontents to grab your passwords and other data, it is almost mandatory to even use different hardware to keep sites and passwords from prying eyes and fingers.

Certainly not entirely practical:

"ck, why do you have three cellphones, two laptops, one computer and a tablet, dear?" is not a question I want to answer up front but I am prepared if need be.

And, even as I type this on my tablet, one laptop is heading to the shop to relieve a software conflict issue and get an o.s. upgrade.