Can someone access your coins if they have the address(es) and your password to your wallet? Or would they need the wallet .day file?