Unpopular opinion: “Confirm password” fields are bad.
Forcing users to enter passwords twice adds friction and lowers conversion rates.
Why optimize for a couple users who make a typo? Just let them reset their password.
More friction for a few, less friction for most. 👌