When I log onto the sftp site WITHOUT an entry in .ssh/known_hosts, I
AM required to enter a password. The key pair has to be there for
sftp to do the encryption.
The key pair is not required for encryption. All the key pair does is provide a means of proving your identity.