What steps should I take if I suspect my web account credentials have been compromised?

What steps should I take if I suspect my web account credentials have been compromised?