The frequency at which passwords should be changed can vary depending on the institution's policies. However, a common recommendation is to change passwords every 60 to 90 days. It is also advisable to change passwords immediately if there is any suspicion of a breach or if a colleague has left the organization.