Depends on how long your passcode is (you can brute-force short ones but anything long is hard), but if it's too long (try http://lastbit.com/pswcalc.asp to see how long it would take) you're locked out. Money transferred on the blockchain can't be refunded easily.