It's convenient to change the user's API Token when its password changes.
Model:
protected function password(): Attribute{ return Attribute::make( set: function ($value, $attributes) { $value = $value; $attributes['api_token'] = Str::random(100); } );}