--- password_strength_old.module	2010-03-26 12:04:56.000000000 +0000
+++ password_strength.module	2010-04-14 15:38:08.000000000 +0100
@@ -182,19 +182,23 @@ function password_strength_elements() {
  * by password_confirm_validate.
  */
 function password_strength_confirm_validate($form, &$form_state) {
-   
   $pass1 = trim($form_state['values']['pass']['pass1']);
   if (!empty($pass1)) {
     global $user;
     $min_length = variable_get('password_strength_min_length', '6');
     $min_level = variable_get('password_strength_min_level', 4);
     $pass = $form_state['values']['pass']['pass1'];
+    $pass_conf = $form_state['values']['pass']['pass2'];
 
     $has_letters = preg_match("/[a-zA-Z]/", $pass);
     $has_numbers = preg_match("/[0-9]/", $pass);
     $has_punctuation = preg_match("/[^a-zA-Z0-9]/", $pass);
     $has_casing = preg_match("/[a-z]+.*[A-Z]+|[A-Z]+.*[a-z]/", $pass);
 
+		if ($pass != $pass_conf) {
+			form_error($form, t('Passwords do not match.'));
+		}
+
     // Check if length is less than 6 characters.
     if (strlen($pass) < $min_length) {
       form_error($form, t('Password is not long enough. Password must be at least @l characters.', array('@l' => $min_length)));