>At least one should refuse paste, just to make sure I haven't copied the wrong string. I disagree with this. If you paste a password into both fields, then pa

>At least one should refuse paste, just to make sure I haven't copied the wrong string. I disagree with this. If you paste a password into both fields, then paste it into your password manager, it doesn't matter if you've copied the wrong thing, because your password manager will still remember it.