Use only on a trusted device. The persistent credential is stored as a rotating server-side token, not your password.