Your private key is used to generate a one time password and is not transmitted to the server.
Passwords are transmitted in plaintext. It is recommended to use a key file to login.