If he has already changed his password he may already suspect, in which case telling him wouldnt really hurt you much but may be considered a sign that you trust him. If he dosent already know, will he feel violated to know you accessed his private stuff ( You know like reading someones private diary or journal)? Will you feel horribly guilty and be driven to tell him later? Only you know the answers to these questions.