In Apple Passwords I sort by date and have been updating passwords of my oldest updated accounts. I'm doing five a day since sometimes it takes more than a few minutes for some sites. Some notes:

• Sort by last update date is close but not the best since any edit will change the last update date. I may miss one or two but hopefully get it later next time around.
• Lots of sites how have 2FA which is nice -- nicer when it's an authenticator app which Apple supports very well. Still good when it's SMS since again with macOS/iOS you can click in the field and it gets the authentication code from the SMS message (almost always, some sites send explanation text followed the code and the OS won't see that as an SMS code). Worst is email since then I have to go and read the email and manually copy/paste.
• More and more sites support Passkeys which is also nice as that's more secure.
• This is also a good opportunity to check that my address is correct, my phone is correct (I'm transitioning to mobile only), that privacy settings look good, etc.
• Also a good opportunity to delete passwords for dead sites or consolidate passwords -- Passwords can add multiple web sites to an entry but two different login usernames gets two different entries; normally in that case I'll delete one of them to avoid confusion since authenticator and Passkeys go to one entry.
• Due to how some web sites do it Passwords might not recognize that you updated a password after you click save. But if you then navigate to a different page it'll ask you.
• Apple Keychain Access is still a thing. It keeps track of computer passwords like for encrypted hard drives and network shares (though not WiFi that got moved to Passwords).