[hperl]

Hi, thanks for the feedback. I've been building this at Ory.

> It is usually worse for users using a password manager, since some of them will not be able to detect/autofill the password field on the second page. But I haven't checked, maybe Kratos UI is supported by all major password managers and this is not an issue here.

The two-step flow is currently only implemented for registration, so autofill should not be a concern. However, we surely want to inform the password manager to store the correct password after registration.

Do you think https://developer.mozilla.org/en-US/docs/Web/API/Credentials... is the correct way to inform a password manager?

> Since the parameter is called "enable_legacy_flow", does it mean it will be removed in future releases?

In general we perceive the two-step registration as an UX improvement when you have multiple credential strategies, which previously would generate a long registration form with repeated fields. However, we have no plan to remove the config value in the forseeable future.

[Fire-Dragon-DoL]

Password managers autofill during signup too, both username and password and when they do, they detect it and ask if you want to save the credentials, including the random generated password