Allow copy and paste in password fields
allow-copy-paste-in-password-fields
Always allow users to copy and paste in password fields.
Description
Always allow users to copy and paste in password fields. People may have good reasons, including using a password manager. Pass when paste works; fail when the field blocks paste or prevents copying from a manager. Copying hidden password text is browser behaviour when the field is shown and is not something to override. This is paste permission, not autocomplete token choice.
When to use
Password create or enter fields.
Not when
Not a requirement to copy hidden (type=password) text; browsers only copy when the field is shown.
Agent hint
Do not disable paste on password inputs.
Paste (and copy when shown) works in the password field.
The password field blocks paste or otherwise prevents copying from a password manager.
Citations
GOV.UK Design System — Password input
https://design-system.service.gov.uk/components/password-input/