A session key created by an application as needed. Before creating a derived session key, an application prompts the user for a password.