Ah, OK. I was hoping it would maybe do something clever like hash it and send a byte so the server can give it a small list of passwords to check locally but I guess they didn’t bother…