Passwords are not private keys. Users can specify passwords when creating wallets and can change passwords after wallets are created. Password is used in the following cases:
Back up mnemonics/private keys/Keystores
Unlock Keystores when importing wallet with Keystores
A private key consists of 64-byte hexadecimal characters. There is only one private key for an account and cannot be changed. In a wallet, the private and public keys are normally stored in pairs. We may derive the public key with the private key and then derive the address with the public key using an algorithm. This is an irreversible procedure.
Since the private key is used to import your wallet account, it must be kept secure. Once the private key is leaked, others can transfer your assets out of your account by importing your wallet.
A mnemonic consists of 12-24 English words and is an alternative of a private key. One mnemonic can be used to generate multiple private keys. It converts the 64-byte private key into a number of common English words through an algorithm for users to memorize it more easily.
Mnemonic can access multiple private keys associated with it, but the private key cannot access the mnemonic in turn.
Mnemonic can be used to import wallet accounts and can be generated when creating a wallet. When users create a TronLink wallet, they will be notified to back up the mnemonic of the current wallet account. There is only one mnemonic for an account and it cannot be changed. It is important that you store the mnemonic in a secure way (e.g. by writing it down on a piece of paper) to avoid disclosure.
Private keys are stored in an encrypted JSON file known as Keystore. As a result, it is the encrypted private key that must be used in conjunction with the wallet password when importing the wallet account.
Note: You must exercise extreme caution when storing your Keystore, private key, and mnemonic, since if the mnemonic is stolen by a third party, your assets are at great risk. It is recommended that you store your Keystore, mnemonic or private key offline rather than by taking screenshots or storing them in social media accounts, emails, mobile phone memos, etc.
TronLink does not store any mnemonic, private key, Keystore or password from users.