Let them paste passwords Allow your website to accept pasted passwords - it makes your site more secure, not less.