I haven't seen where it pulls the password from, but in theory it could pull it ...

cbsmith on Sept 21, 2012 | parent | context | favorite | on: Pandora doesn't hash their passwords

I haven't seen where it pulls the password from, but in theory it could pull it local session cookie.