I recently changed my password through the "I forgot my password" option, only to find that it only requires you to input your new password a single time after you verify ownership of the account.
It would be helpful to have a secondary input box to make sure that the entered password matches the first input box. This helps to prevent mistyped passwords and saves users time, headaches, and getting locked out of their account when they type it as they had intended at login. (Though I don't know if you employ an auto-lock on accounts when passwords are entered incorrectly too many times. If not, you should!)
Customer support service by UserEcho