It uses a PRNG with no site-specific seed, it just stores that result temporarily so it can be filled it password confirmation fields or login forms during the same session to ensure the user can complete their password change process.
Code: https://searchfox.org/mozilla-central/rev/abcee8d2c97a5c8a1f...