If you let the password fall into someone's hand, it's best to move the token to a new wallet, and accept the old wallet. There is no way to retrieve or change your wallet password like changing the password of a facebook account.