Enter new password once and characters hidden. Better be sure you know what you typed/pasted. How can they screw up the basics like this?