I'd answer that giving out password is a security breach and they need to rework their process. Honestly, if they actually are asking for that, I wouldn't want to work with them.