Option 4: Use Fejoa auth to use the same password for authentication and for encryption without revealing the password to the remote party:

https://fejoa.org/fejoapage/auth.html