Discourse should always ask people to retype their password just to make sure they didint mistype it, especially when they are restting their password because its stupid for a user to have reset the password again just because they mistyped it. Also, if possible, it should display an icon when capslock is on.
I would like passwords to be confirmed, but for a very different reason.
We ask users to sign up for our forum and get approved by us before using it. We have added a text field to ask for their account name so we know who they are.
When initially signing up, the form asks for a password but it doesn’t ask users to confirm the password. While I agree this might be an unnecessary extra step, people are kind of used to it being there. We often have folks entering their password into the text field. My staff ends up rejecting users and seeing personal passwords. When this happens, we email the user to let them know. However, it happens enough for me to hope for a change.
I’d love to either put my text field above the password field or to add a password confirmation field.