You set a pin/password to unlock the webauth storage. That's the first "first password". For example if you use ios it kay require your phone faceID or pin to

You set a pin/password to unlock the webauth storage. That's the first "first password". For example if you use ios it kay require your phone faceID or pin to "login" into services just like they do on appstore installs