Unlike regular passwords, you don't need to change app passwords on a regular schedule since they are randomly generated and provide limited access. However, if you believe an app password has been compromised or if you lose a device that had an app installed, you should revoke the password and generate a new one.
