It is just a big random string, running a command like 'head -n 1 /dev/random | sha1sum' would be good enough.

Once it is created, it should stay the same since it is used for encrypting the passwords.