> the first time the user types the password, then they highlight and ^C and then paste into the second field... Except no browser ever allows you to output da

> the first time the user types the password, then they highlight and ^C and then paste into the second field... Except no browser ever allows you to output data (as a clipboard copy-operation is) from a password field. This is not a real scenario.