password should be like a bip38 protection for your private key. If you try to sign a message and you are asked to provide a password so you have already your private key stored and ready to be used.
https://bitcointalk.org/index.php?topic=5269031.msg55003671#msg55003671
check this message for private key export.