Specifically for this part (which usually not discussed), usually it's recommended to change your password between 3 months - 1 year.
1 week or 1 month is clearly too often to many people and it'll make people forget their password instead.
The more passwords they use, to reset their passwords, the more chances that they will make overlaps with their passwords. If they don't use password generator software that creates random passwords for them. If they do this by hands, they usually choose what they are familiar with and the password structure can be very similar.
6 months to 1 year is good but the advise to change password is not necessary because if you set up a very strong password and your devices are protected well, why do you have to change it with another one?