The way I understand it, when a password grants access to something, then it's said to be the password for it.
Consider these examples: The password of one of the users was hacked last week. It's a good practice to change the password for your account on a timely basis.