Allowing password pasting has been a standard recommendation from the security community for years.