You enter your Auth-Code in that box. It is like a password to transfer the domain name to another registrar. But this is not your domain account password. :)
You can get it at your loosing registrar. Another name used by different registrar but all point to the same thing. Auth-Code, Transfer-Code, Auth-ID, etc.