Typically services will have you confirm your current password before allowing you to change it (for exactly this reason).