Say I went to a fake website asking me put my runescape info in and I did, if I just change my pass before any harm is done am I all good? I didn't install anything nor did I run anything.
You're fine as long as you change your password and have a decent antivirus. It's highly unlikely that a keylogger or anything was downloaded simply from entering in your info.