The PrivatePassword is assigned at registration time of a User. It is a salted hash of the chosen password.

Everything with a PrivatePassword property can be logged in and then store items.

When the value of PrivatePassword is updated later, the save mechanism will detect that the format does not look like a password hash and rehash it.

Note that PrivatePassword is a Private property, so it has restricted read access.