Any text string can be entered, similar to selecting a password. The entered token will be hashed and stored in the database.
The token is used with the password reset tool. It is required if you want to provide any API that uses one of the password reset authenticators.
For more information:
Installing the API Server
What are the Installation Steps for the Operations Support Web Portal?