.pgpass is in your home directory.
I guess from your user agent that you are on Windows.
Was the password you entered for an operating system user or
for a database user?
There is a simple way to get out of this situation:
Edit pg_hba.conf and change the authentication method to
"trust" for all local and localhost lines. Then restart
PostgreSQL.
After that, neither "createdb" nor "psql" will ask a password
if you are on the same machine, and you can use the psql
command "\password" to change your password.