Your password, Two-Factor Authentication (2FA), and API tokens are all managed from the Security page.
Manage your user account details and security from the profile screen, reached through your avatar in the lower-left corner of the CMS.