The key doesn't use a password so I don't see how you would change it. What you have is a unique key that's assigned to only you to use.
Of course, if it's sent 'in the clear', then senidng it along with a password in the same fashion wouldn't make it any more secure.
So the follow on question to HB admin would be, is our key sent via a secure link or in the clear?