If you inadvertently entered your credentials on a fake site, changing it quickly mitigates risk.