I seem to recall the password was client-side too. So if you had Lotus Notes in a VM and you restored from a save point you needed to remember what your password was when you did the save.