I think either is ok (if passwords are non random). Depends how strict you like to be. No harm in using is_know_passworda, but I think it's a fringe problem. If the player already knows the password then they already played the game to know them, so what does it matter if they cut a corner on subsequent runs?
Unless you are using password knowledge to assume so other pre requisite action has taken place (not recommended).