Chris 🌱 
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
The Penguin of Evil@brainblasted and a 60 second timeout. Heck let's add some JavaScript that fakes hitting an adjacent key some of the time just for fun