Hi David,
The “password” field is actually used for an API key.
I agree that this isn’t a particularly secure approach, but my client prefers to work with this service provider for a couple of reasons (e.g., Hebrew language support and pricing), so switching providers isn’t an option at the moment.
Anyway, thanks a lot for your help.
Best regards,