Change password

The confirmation field runs a custom validator against the new-password field — a classic cross-field rule — and the new password requires a minimum length.

See Custom & async validation for the details.