I think the question is not password related as the key may be used as a UID for a "semi restricted" link.