Rotate all passwords

All passwords including FTP, database and of course site admin passwords should be updated on a regular basis. We recommend monthly if you access your website regularly.You should also have a reasonable password policy in place that includes passwords must not be re used, do not use the same password for everything, make sure passwords are a minimum of 8 characters and is a combination of uppercase, lowercase, numbers and symbols.