If this is true, and no one else has been using your computer, you may be infected with a keylogger that has given an attacker your password. Log in on a different computer and change it from there, and don't log in on your first computer (to any site that matters!) until you've cleaned it up.