Once you have a firmware password set, you’ll also need it to boot from another drive, from macOS Recovery, or when your Mac has paused startup and displayed a lock icon with a password field instead.