Hacker News Reader

I would probably wait at least until everybody's free fraud protection expires, which is usually a year.

This is exactly how it works. Passwords can be changed, your personal details can't.