Same password as the control panel. Shared links stay public — only creating them needs this.