Why should we ask the password twice during registration?
When designing a new and simplified signup page I got into an argument with a colleague about the necessity of the "repeat password" field.
We designed the signup process in such a way that the user will be logged in automatically after completing the email verification process. So, at least initially there will be no need for the user to enter their password. Therefore the user will only 'verify' the password when logging in the second time in case we omit the "repeat password" field.
We do have a "recover password" option so in the worst case the user could go through that process in case they mis-typed the password when signing up. But then again, how often do you mis-type your password?
Even the big players don't seem to agree on which way is the best...
Don't need to re-type the password:
- Facebook (although they require re-typing your email)
Need to re-type the password:
Is this necessary?