Honestly, it could just be 'password'. She just needs to make sure her accounts don't get hijacked with Company of the Week has another breach of data. It's very weak if her device is stolen, but thats less of a concern in her situation. Hell, you can set up drobox and give yourself access to the same data via icloud sync.
It would legit 'work in the background'.
I'm an over thinker, sorry. (ha, I bet I sound crazy).