You can add a connection redirect to the server so it will still work while you go through the workflows and update the connection profiles and republish them. With the connection redirect, the server will try the password in the connection profile and if that fails, it will look at the redirect. So there will be a small performance hit, which is why you need to go through the workflows and update their connection profiles. When all workflows are updated, you can remove the redirect.