diff --git a/packages/client/components/auth/src/flows/FlowConfirmReset.tsx b/packages/client/components/auth/src/flows/FlowConfirmReset.tsx
index ac1994c4..9ca6faea 100644
--- a/packages/client/components/auth/src/flows/FlowConfirmReset.tsx
+++ b/packages/client/components/auth/src/flows/FlowConfirmReset.tsx
@@ -20,8 +20,16 @@ export default function FlowConfirmReset() {
*/
async function reset(data: FormData) {
const password = data.get("new-password") as string;
+ const confirmPassword = data.get("confirm-password") as string;
const remove_sessions = !!(data.get("log-out") as "on" | undefined);
+ // Check if passwords match
+ if (password !== confirmPassword) {
+ alert("Passwords do not match. Please try again.");
+ return;
+ }
+
+ // If passwords match, submit the form
await clientController.api.patch("/auth/account/reset_password", {
password,
token,
@@ -35,7 +43,7 @@ export default function FlowConfirmReset() {
<>