As @Ddmr Ddmr rightfully stated it's important to have a signed bitcoin message and also I would not totally agree with continuous change of password. If you can just have a strong quality password you would be fine