Let them paste passwords

Allow your website to accept pasted passwords - it makes your site more secure, not less.

ncsc.gov.uk