When creating a new Stack Overflow account there was not a confirm field for the password, which is a good practice.

After first comments, I have to say the following:

  • I agree that it is debatable
  • To be more clear, when I signed up there were not second password field, show password option or something similar to be sure that password is correct typed. It is the first time when you choose the password, it's not about forgetting password or mistype login or recover it. In fact I suggest a simple verification, no matter how it is done, to be sure of what you entered. I haven't notice one.
  • 6
    The good practice is challenged: ux.stackexchange.com/questions/20953/… but if you would say it is common practice we could agree on that. – rene Jun 4 at 10:07
  • 7
    More and more users use automatically generated passwords, making the confirm field unnecessary. – Mast Jun 4 at 10:52
  • 2
    "In fact I suggest a simple verification, no matter how it is done, to be sure of what you entered. I haven't notice one." 1. type your password in some sort of plain text thing (e.g., notepad) 2. Verify it is correct. 3. Paste it in the password field. OR some browsers allow you to reveal the password field. 1. Type your password 2. Reveal to check if it is correct. – VLAZ Jun 4 at 15:02
  • 1
    @Mast - or an OAuth2 flow with their provider of choice which is passwordless (in support of the point that the confirmation field is an outdated practice). – Oleg Valter Jun 4 at 18:59
  • I was just asking about that field, but voting down heavily because the question is obsolete and is not with the trend, as the vote seems, doesn't help anybody. However comments are welcome and everybody is free to vote as they like. – teo Jun 7 at 6:16
  • I'm talking about signing up for the first time (new account), which is done once, not sign in (login) after that. – teo Jun 7 at 6:50

There's no need for a confirmation field for an account that doesn't involve any identity verification other than a working email address. If you mistype the password when you set it, you just have to use the "forgot password" process to correct it to what you want it to be.

If the site had a more involved process for resetting a password, then confirmation might be desirable, but as it is the confirmation is just annoying (especially for those of us that use a password vault and generated passwords).

  • Partial true. But signing up with Google, Facebook or other account means much more behind the scene. – teo Jun 7 at 6:04

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .