# Why Doesn't Discourse Have a "Confirm Password" Section During The Signup Process?

**URL:** https://meta.discourse.org/t/why-doesnt-discourse-have-a-confirm-password-section-during-the-signup-process/77603
**Category:** Feature
**Created:** [09.Январь.2018 19:08:22 UTC](https://meta.discourse.org/t/why-doesnt-discourse-have-a-confirm-password-section-during-the-signup-process/77603 "2018-01-09T19:08:22Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![jaevanryssel](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jaevanryssel/32/86830_2.png) [@jaevanryssel](https://meta.discourse.org/u/jaevanryssel)
#### Post date: [09.Январь.2018 19:08:22 UTC](https://meta.discourse.org/t/why-doesnt-discourse-have-a-confirm-password-section-during-the-signup-process/77603/1 "2018-01-09T19:08:22Z")

</div>

Hi,

I noticed something that stood out during a new Discourse user/member registration process/form, which is that there is no typical “confirm password” section (unless I missed turning this on in the settings).

Twitter and Facebook don’t ask you to confirm your password, but vBulletin and Invision does (but then again Xenforo doesn’t).

I don’t have any major issue with this, just asking out of curiosity.

---

<div class="post-metadata">

### Author: ![dnsmichi](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/dnsmichi/32/379505_2.png) [@dnsmichi](https://meta.discourse.org/u/dnsmichi)
#### Post date: [09.Январь.2018 19:21:44 UTC](https://meta.discourse.org/t/why-doesnt-discourse-have-a-confirm-password-section-during-the-signup-process/77603/2 "2018-01-09T19:21:44Z")

</div>

I had that discussion with one of our UX designers lately too for a different application. There’s pros and cons with an additional form field. I for myself never really typed the password twice, just copy pasted it most often. Since there is a reliable way to reset your password via mail, or even use oauth these days, I like the Discourse approach with not asking again and keeping the interface small 🙂

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [09.Январь.2018 19:22:41 UTC](https://meta.discourse.org/t/why-doesnt-discourse-have-a-confirm-password-section-during-the-signup-process/77603/3 "2018-01-09T19:22:41Z")

</div>

[https://meta.discourse.org/t/user-do-not-have-to-confirm-password/4693/2?u=pfaffman](https://meta.discourse.org/t/user-do-not-have-to-confirm-password/4693/2)

Also, it’s very handy to be able to just type a bunch of random characters in to set the password and let the Evil Google remember it for you.

---

<div class="post-metadata">

### Author: ![awesomerobot](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/awesomerobot/32/142900_2.png) [@awesomerobot](https://meta.discourse.org/u/awesomerobot)
#### Post date: [09.Январь.2018 19:31:19 UTC](https://meta.discourse.org/t/why-doesnt-discourse-have-a-confirm-password-section-during-the-signup-process/77603/4 "2018-01-09T19:31:19Z")

</div>

Generally making forms longer means that someone is less likely to complete it. This is especially true on mobile devices.

In this case specifically, we’re already asking for your email address (and you typically confirm your account with it) — so if you typed your password incorrectly you can reset it to your email address. Worst-case is that you typed your email and password wrong, and then your account never becomes “confirmed” and you have to make a new one.

One potential improvement we could make is to have a show/hide password button in the input, to unmask it if someone wants to confirm what they type, but I don’t think we’re running into the issue that often either way.

Some similar opinions out there:

> **[Ecommerce UX Research Articles – Baymard Institute](https://baymard.com/blog)**
>
> The below 450+ ecommerce UX articles are all based on Baymard’s 200,000+ hours of UX research. The articles represent just 5% of Baymard’s Premium research database. Join 60,000+ UX professionals and get a new article every week by email.

> **[Why the Confirm Password Field Must Die](https://uxmovement.com/forms/why-the-confirm-password-field-must-die/)**
>
> Sign up forms are one of the trickiest web pages to design. Including and excluding certain form elements affects the conversion rate. The designer’s job is to figure out which elements they should include or exclude. A common question is whether...

Additionally, you should really use a password generator/manager so you’re not typing them to begin with (but I realize most people won’t).

> **[How to use a password manager (and why you really should)](https://www.theverge.com/2017/7/24/15921282/best-password-manager-1password-lastpass-dashlane-how-to)**
>
> If I could offer you one tip for the future, password managers would be it.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [09.Январь.2018 23:37:41 UTC](https://meta.discourse.org/t/why-doesnt-discourse-have-a-confirm-password-section-during-the-signup-process/77603/5 "2018-01-09T23:37:41Z")

</div>



---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [09.Январь.2018 23:38:13 UTC](https://meta.discourse.org/t/why-doesnt-discourse-have-a-confirm-password-section-during-the-signup-process/77603/6 "2018-01-09T23:38:13Z")

</div>

> [@awesomerobot](#):
>
> to have a show/hide password button in the input

I agree, but this is a browser-level feature not a webpage-level feature.
