Password pasting restriction on activation page

[andmalc]

The new account activation page prevents using paste to insert a new password.  Instead, the password must by typed in manually.   This restriction prevents the use of a password manager to generate a unique and encourages the user to reuse one of their existing passwords.

Here's an article by British National Cyber Security on why this is a bad idea:

https://www.ncsc.gov.uk/blog-post/let-them-paste-passwords

[diveman]

I entered the passwords once and haven't had to do it since.  The computer auto-fills the field for the password after activation.  I had Safari auto generate the password and then I just re-typed it in.  Not so much of a problem.  

[andmalc]

@diveman  For sure you have a good system in letting Safari (i.e. Apple Keychain) generate and keep track of passwords and I've found that some third party password managers like LastPass can bypass this paste restriction.  However other password manager programs work independently of the browser and rely on pasting.