Is it OK to be able to paste text in a password box?

Question

What do you web developers think? Should we disable pasting in masked password boxes in our web applications or not. Could this be a security hole or cause confusion or unwanted results? This is probably a question about user experience and not so much about programming.

Answer 1

Pasting is perfectly OK actually disabling sometimes can cause bigger issues. Most of the users use keepass or similar applications to store strong passwords.

If you force people to type every time this can force them to choose weaker passwords.

Answer 2

Pasting is OK, in IMHO, and is expected. Copying, however, is usually forbidden, with good reason. That is expected now, too. You really just want to go with what most users are familiar with unless you have a really good reason not to.