ssh-keygen prompts for an optional password, but it's just for permissions for your local private key file. So it would be like having an additional password on a text file that just contains "4"