Maybe, instead of having two password fields, they should have a single password field that you cannot type in, but can only paste in, forcing everybody to use

Maybe, instead of having two password fields, they should have a single password field that you cannot type in, but can only paste in, forcing everybody to use a password vault.