Some sites allow you to register and only provide a single password box, which is protected with stars. Traditionally a "confirm password" box is used when registering which allows you to confirm ...
Is it appropriate to display the warning message "Caps Lock is on" when focus shifts to Password field? In gmail and yahoo I don't see it. So, what does the standard say?