Am I missing something? We need passphrase only for web login? Did someone said that there is a passphrase needed when we do "new exchange" thing in ICO page

I believe you need the keys/passphrase from each exchange you make, once the coin goes live. It's that little key button thingy in your login area. If you get your key/passphrase now, just remember to save it somewhere safe.