Is there value in changing your password after failed (malicious) login attempts?

If the password was randomly chosen, then there's no reason to do so.

There might be a reason if someone is trying targeted password at you. ie: if they know you like horses, you are born on 1990, and you're from Alabama, then they might be trying all combinations of these words. Changing your password then could be useful, but not because someone is trying to break into your account, but because the password wasn't originally random.

Another reason could be that someone else found your password on a paper and it contains "0" and "O" and "o", so they are trying all combinations of these.

So for random passwords that were not printed, it's useless.


Knowing that users actually come up themselves with passwords instead of generating random ones, changing your password in such case would probably be less secure, because you'll quickly run out of ideas for your password, and chances are you'll come up with a simpler and simpler one every time you change it.