Yes even on Steemit.com you will need active or owner keys, only if you are logged in with your main password steemit.com or eSteem will be able to sign transaction for voting on witness, otherwise you will be prompted to enter password. Active and owner keys can be extracted/generated from main password, that's why for average users logging in with one/main password is convenient.