Does the user need to enter the password for each transaction?

No. Unless the user logs out or uninstalls the app, they will only need to enter credentials when the password expires (every 3 months).