The passcode is checked on the server and kept in memory only; you re-enter it each visit.