Hi,
faq says:

for clarification:
If I create a BAM! account and then create a project account via BAM!, both BAM! and project use same password, right?
After that it is possible to change the project password via project page and still using BAM! to manage the project account?
If not, weak account key logic is not enough for handling simple account operations?

my concern:
It is a bad practice to use same password for different parties.
If one party is hacked, you may lose other project accounts.