You SQL question is hard to help you with without knowing your SQL server table structure, obviously. Do include for specifics.
A PasswordBox type control supports a property Password server side, however it cannot be bound to for security reasons. See details:
[
^]
Which me wonder why you're acting on the text changed event of a textbox?
Clearly you don't want to act on every change but not until for instance some button is pressed.
<StackPanel Margin="10">
<Label>Text:</Label>
<TextBox />
<Label>Password:</Label>
<PasswordBox id="MyPasswordBox" />
</StackPanel>
and then on the codebehind you can simply access it with
string password = MyPasswordBox.Password;
Of it is boxed in an event like object, remember to unbox it first.
var pwBox = (PasswordBox)sender;
But don't try it if you sender is on your button event ;)