Yes, password for both are different. However, do note that if EXE is blocked, mobile and web will also be blocked. 100 wrong password attempts are allowed on EXE.
As in the Margin Pledge process the stocks are lying in client's own demat account, client will get all the corporate benefits announced, like dividends, etc.