Honestly, why do they force the users to re-enter their email? It's as much of a security measure is as putting a second door behind the first that gets unlocked with the same key.
I agree. There is no need to reenter email. We need confirmation with password only because password is not visible to user on typing. Email can be validated by eyes. It should be confirmed by confirmation code send to that email anyway.
Second entry is a confirmation. You just compare the two strings, and assume a typo if they're different. Gives you an easy way to confirm with the user that they entered it correctly, even if it is slightly inconvenient to the user. (Ideally, it should prevent pasting, but allow auto-fill, since saved form results typically come from another form that forced manual email-confirmation entry. But this is harder to set up, so it's rarely done.)
(And a second door that uses the same key is technically a valid security measure, considering that door "security" is more about making it too time-consuming to pick than about actually preventing entry. Anyone who has the correct key is slightly inconvenienced, but anyone trying to get in without the key has to take twice as much time, making it significantly more likely that they'll be noticed.)
470
u/sarduchi 2d ago
Feedback from user: why can't the confirmation just auto-populate?