One key, once per browser. After this the cookie carries it for a year, so a phone or tablet only ever asks the first time.
Forgotten? Delete admin_unlock_config.php at the doc root and this page will offer setup again.