Your passphrase unlocks both the server session and the on-device private key.
min 12 chars. long passphrase recommended.