It's hard-coded in the firmware; there's no way to retrieve it via the web interface. The text behind the password characters is just 4 asterisks.