Hi! I can answer your questions. Yes, it's normal what they're asking you, just don't use the same password for other account (your mail, twitter, etc). If you want to do me more questions, hire me!.
I've been working for years in the customization of Wordpress themes and doing html/css sites, so I think you’ll find I have the knowings you’re looking for.
Thank you for your consideration,
Matías Valle