You only need an Active Key to login. We need to know who is making the transfer and where to send withdraws. 😉

Besides, you are login in via SteemConnect/KeyChain, so all your keys are secure and remain 100% private. Nobody but you have access to them.