When doing an incremental backup, Obnam reads metadata back from the backup repository to determine what it needs to back up. For example, names of files and when they were last modified. The metadata is also encrypted, and Obnam needs to decrypt it to be able to do an incremental backup. That is why Obnam needs the passphrase.