Comment by axman6

Even if this doesn’t increase security, you should still do it in the hope the user will check the username they’ve just typed as well as retyping the password.