Either you can set the password by using in the party line:
.chpass username password
or they can set their own password with:
/msg botname PASS <password> (without the < >'s)
I always try to get the user when they set their own to make sure they do it on the hob bot if possuble.