On entity save, identify the user fields that have been changed
Per the hook_entity_update() documentation:

This hook runs once the entity storage has been updated. Note that hook implementations may not alter the stored entity data. Get the original entity object from $entity-&gt;original.

In your event listener, you can compare the email/password fields on $entity &amp; $entity-&gt;original to check if they have changed.