I have considered Joey being 'tied' up to get the password as well. My only issue with that is that we have no indication that Joey actually changed the pswd, and because we know that CM already had the password, he would have no need to 'get' it. I believe that Quickbooks would have had a log of the password change considering they kept logs of when it was accessed, what was done, etc.
If CM was able to access the account on the 2nd, Joey became aware of it the morning of or before the meeting with Chase on the 4th... why wouldn't Joey change his password immediately? That is just not logical to me at all. We know he had access to it on his phone, he had access to it at home... change the password before it happens again! JMO