354896547981565

True. But you can hide the default message and replace it with your own. You'll still benefit from the form validation.

I tried to login to booking.com, but it claimed that I hadn't registered yet. So I registered again, with the same email. It didn't verify my email, and after login out and in again, with the new password, all my old bookings were still available. So yeah... I was effectively able to change the password without any form of verification.

This was 20 days ago.

T14

Doesn't work for me either. Android 10, Firefox 68.1.1 and Chrome 77.0, dark mode activated.