I'm confused by the directions. If I have 20 usernames did you reset all 20 passwords for these names to random strings and now I just need to pick new password

I'm confused by the directions. If I have 20 usernames did you reset all 20 passwords for these names to random strings and now I just need to pick new passwords of my liking on my own time? Or do I need to go through all 20 right this moment and change them from their old value to a new value? Basically do the hackers possibly have access to my ftp accounts or have you already switched my passwords to random strings?