Am I missing something? We need passphrase only for web login? Did someone said that there is a passphrase needed when we do "new exchange" thing in ICO page