From 7ebfd2d33571b662a4997004cdba53f220631e8b Mon Sep 17 00:00:00 2001
From: Rose Hogenson <rosehogenson@posteo.net>
Date: Mon, 10 Nov 2025 19:57:54 -0800
Subject: Confirm password

---
 tools/hashpw/hashpw.go | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/tools/hashpw/hashpw.go b/tools/hashpw/hashpw.go
index 526ad15..f1e76db 100644
--- a/tools/hashpw/hashpw.go
+++ b/tools/hashpw/hashpw.go
@@ -1,6 +1,7 @@
 package main
 
 import (
+	"bytes"
 	"crypto/rand"
 	"encoding/base64"
 	"fmt"
@@ -18,6 +19,15 @@ func hashpw() error {
 	if err != nil {
 		return err
 	}
+	fmt.Fprint(os.Stderr, "Confirm password: ")
+	pwConfirm, err := term.ReadPassword(int(os.Stdin.Fd()))
+	fmt.Fprintln(os.Stderr)
+	if err != nil {
+		return err
+	}
+	if !bytes.Equal(password, pwConfirm) {
+		return fmt.Errorf("passwords do not match")
+	}
 	salt := make([]byte, pwhash.SaltSize)
 	rand.Read(salt)
 	hash, err := pwhash.Hash(string(password), salt)
-- 
cgit v1.3.1