It is always a very good idea to change your Apple ID password a once or twice a year. When Apple admits that its security has been compromised, you should change your ID password right away. If you feel that your personal security has been hacked, or find out the security of a service you do business with has been, like Apple’s developer website, then you should change your account passwords you have with those services immediately. Changing all of your account passwords on a regular basis; every 60 days is a very good idea according to the Defense Information Systems Agency. It may surprise you that there is no app for managing your various Apple account IDs and passwords. But here’s a quick primer on updating your iTunes and iCloud passwords, and on enabling two-step verification on your Apple ID if you have not done so already.
The information you entered to Apple when setting up your Apple ID will be used to verify your identity with Apple’s support technicians. So it is important to keep your account information confirmed and updated as possible, this includes your real name, address and phone numbers in addition to the following:
Pick a new password: From “Password and Security” in the Apple ID’s main management web page. You can update your old password to a new, more secure password.
Create your security question: that only you know the answer to.
Add an alternate email: After updating your password, go back to the “Name, ID and Email Addresses” and make sure you have at least one alternate address set up on your account.
Two-step verification is an additional form of security that requires you to verify you are who you say you are before you can use your account. To activate two-step verification, you need first log on to the Apple ID management site, select “Password and Security” and follow the steps after clicking on the “Get started…” link. Four-digit PIN: When you first set up two-step verification, there will be a three-day waiting period before you can complete the process with a trusted device and create a four-digit PIN. This pin will be used any time you make an iTunes, App Store or iBookstore purchase from a new device. To complete the setup process, simply return to https://appleid.apple.com after the three days have passed as mentioned in the reminder email that Apple will send you. Your PIN will then be sent to one of the trusted devices listed via SMS or via a Find My iPhone alert message.
the 14-digit Recovery Key is more important than the PIN that you will receive. Print this out and keep it safe with all of your other important paper documents. This recovery key will be used if you forget your password or lose one of the devices you have configured with your Apple ID. Even after setting up two-step verification, all of your data and information is still not totally safe. After the two-step verification for your Apple IDs it was discovered that your iCloud backups were not totally protected. Protect your password and personal information as much as possible, but realize nothing is ever totally secure.