The password goes to the stick, which signs in to the unit. Over a direct connection it is encrypted end to end; Odin never sees it or stores it.