This picture shows me typing in my confirmation password when I sign up:
My response? Yes, I know my passwords do not match, I'm still typing them!
Why does this show all the time, and not just after you have clicked off the box, if they don't match?
Or, an alternative solution:
Maybe they should only show if they match or not, once the second password's length is >= to the first password's length.
Or do what some sites do: background red in the second box until/unless they match. Then it's not obtrusive but is easy to implement.
Telling users passwords don't match and aren't strong enough
When registering should the passwords match/don't match still be shown if the initial password isn't strong enough
When should I validate that the password in a confirmation field matches the first password entered?