It is best to change your password every once in a while, but more important to never ever click on any spam, or give your email address to a website you do not know ..
I'd also like to add to NEVER follow a link in a email to an account you already have anywhere. Always type it in your browser..

I get email in my "other" email address from facebook saying Mrs. XXX sent me a friends request and Mrs. XXX is already my friend. This email look REAL and is exactly like the one fb send out.... however I KNOW fb does not and has not ever had that address.. It always has a link to follow to facebook and KNOWING it was phishers, I clicked on it just for the heck of it (I had my FB page already opened in another window) to see what would happen and sure enough, it came up a page looking exactly like the real BF but asking me to log in.. (If I had done it, they would have had MY information and hacked my account)

I recently got another one in that same account saying Mr. ZZZ had sent me a friends request.

I change my password often in my email accounts and on FB.