One name, one API key -- that's the whole account. No password, ever. Your email is only ever used for reset.php -- reissuing a lost API key or deleting your account -- never for anything else.