user434: "Change Passphrase..." obviously lets me encrypt the wallet with a new string of text.  I think (correct me if I'm wrong) that this creates new private key(s) inside wallet.dat.  
How are existing addresses affected when the passphrase is changed?  

Are they still linked to the old private key (previous passphrase)?  
If so, should I send those Bitcoin to myself (sending them to a new address that was generated after the change of passphrase)?


user5453: If your wallet hasn't been compromised (how can you be sure?) then it should be enough to secure it with a strong passphrase and then be sure to back it up.
If your wallet has been or even just might have been compromised then securing it with a strong passphrase now might not be enough.  Sending the Bitcoins at risk to a new address in the same wallet generated after the strong passphrase is put into place might not even be enough.  It might take creating a whole new wallet on a known to be uncompromised system (how can you be sure?) and securing it with a strong passphrase before using an address generated in it to establish security.
Backing up your wallet to a cloud, e.g. emailing it to a Gmail account, etc., puts it at risk.  If you ever did this before securing it with a strong passphrase then you should really move to a new wallet.  Deleting the pre-strong passphrase copies is an illusion.

user208: The wallet actually uses a randomly generated master key to encrypt the keys, and this master key is encrypted using your passphrase.
When you change the passphrase, all that changes is the encrypted master key. The actually encrypted wallet keys aren't touched at all.

434: <p><em>"Change Passphrase..."</em> obviously lets me encrypt the wallet with a new string of text.  I think (correct me if I'm wrong) that this creates new private key(s) inside wallet.dat.  </p>

<p>How are existing <em>addresses</em> affected when the passphrase is changed?  </p>

<ul>
<li>Are they still linked to the old private key (previous passphrase)?  </li>
<li>If so, should I send those Bitcoin to myself (sending them to a new address that was generated after the change of passphrase)?</li>
</ul>
 5453: <p><em>If</em> your wallet hasn't been compromised (how can you be sure?) then it should be enough to secure it with a strong passphrase and then be sure to back it up.</p>

<p><em>If</em> your wallet has been <em>or</em> even just might have been compromised then securing it with a strong passphrase now might not be enough.  Sending the Bitcoins at risk to a new address in the same wallet generated after the strong passphrase is put into place <em>might</em> not even be enough.  It <em>might</em> take creating a whole new wallet on a known to be uncompromised system (how can you be sure?) and securing it with a strong passphrase <em>before</em> using an address generated in it to establish security.</p>

<p>Backing up your wallet to a cloud, e.g. emailing it to a Gmail account, etc., puts it at risk.  If you ever did this before securing it with a strong passphrase then you should really move to a new wallet.  Deleting the pre-strong passphrase copies is an illusion.</p>
 208: <p>The wallet actually uses a randomly generated master key to encrypt the keys, and this master key is encrypted using your passphrase.</p>

<p>When you change the passphrase, all that changes is the encrypted master key. The actually encrypted wallet keys aren't touched at all.</p>
