Avoid a confirm-password field
avoid-confirm-password-field
Do not add a second confirm-password field when the password input can be shown and hidden.
Description
It is not necessary to add a second password field, also known as a confirm-password field, particularly when the input lets users show and hide the value. One field plus reveal is enough to check entry. Fail when a re-enter confirm field is required in addition to the password. This is not about repeating an email field, and it is not about asking for current password and new password as two different values.
When to use
Creating or entering a password with a show/hide control.
Not when
Not a ban on repeating email fields, or on two distinct passwords (current vs new) on a change-password form.
Agent hint
Use one password field plus show/hide. Do not add a confirm-password input.
Create/enter password uses one password field with show/hide, not a paired confirm field.
A confirm-password (re-enter) field is required in addition to the password input.
Citations
GOV.UK Design System — Password input
https://design-system.service.gov.uk/components/password-input/