The sync password never leaves this device. It is what encrypts the copy kept in the repository, so it must be the same on every device that shares it; the token only opens the repository. It is asked for once: afterwards the vault opens with the phone screen lock, an app code, or this password - your choice, under Unlock with, which appears in these settings once the vault is open.