This runs once. Your password is hashed with Argon2id and never stored, logged or displayed anywhere in readable form.
The setup_token value from your configuration file. This is what stops anyone else reaching this page.
setup_token
You will sign in with this.
Twelve characters or more. A short sentence you will remember beats a short scramble you will not.