I got the email about the potential security issue and updated my password accordingly.
My question is that I cannot remember how I setup my Raspberry Pi with FA as it was a while ago now. Do I need to update the password in the config anywhere?
No changes are required to the Pi. It uses the long, cryptic “Unique Identifier” field for ID that you can see on your stats page when logged in.
The user/pass is mainly used for web login, and also the Android and iOS apps.
Ancient history. I seem to remember that FA used user/pass in the early days as a Pi login method, but that changed later. Many years ago, they even supported a feature that was called “secondary sharing” which fed directly from PlanePlotter and relied on the PlanePlotter unique 2-character sharer code for ID. That method was also removed years ago for many valid reasons. Those PP sharer codes could occasionally change and that caused issues with FA users trying to claim their code.