What's the procedure for changing the password?

I take it this would be a wise step after having a server hacked, no?