This runs once. Pick something long — at least 10 characters. Store it in a password manager, because there is no reset link.