The sync password never leaves this device. It is what encrypts the copy kept in the repository, so it must be the same on every device that shares it; the token only opens the repository. It is asked for once: afterwards the vault opens with whatever you pick under Unlock with below - the phone screen lock, an app code, or this password.