If a factory reset is not viable because you must maintain the existing program, the alternative "top" method is to locate the original project file (.ap[x]) in TIA Portal.
This approach allows researchers to dump the entire 128MB memory space of the CPU (in models like the 1215C V4.4.1) and search for password-related information within the data structures. s71200 password unlock top