diff --git a/Gruntfile.js b/Gruntfile.js
index ab2364690d..8bfd868ed1 100644
--- a/Gruntfile.js
+++ b/Gruntfile.js
@@ -43,6 +43,7 @@ const {
   LIGHTWEIGHT_CLIENT = 'true',
   MAX_EVENTS_AFTER = '',
   NODE_ENV = 'development',
+  UNSAFE_HARDCODED_TEST_PASSWORD = 'false',
   EXPOSE_SBP = '',
   ENABLE_UNSAFE_NULL_CRYPTO = 'false',
   UNSAFE_TRUST_ALL_MANIFEST_SIGNING_KEYS = 'false'
@@ -227,6 +228,7 @@ module.exports = (grunt) => {
         'process.env.LIGHTWEIGHT_CLIENT': `'${LIGHTWEIGHT_CLIENT}'`,
         'process.env.MAX_EVENTS_AFTER': `'${MAX_EVENTS_AFTER}'`,
         'process.env.NODE_ENV': `'${NODE_ENV}'`,
+        'process.env.UNSAFE_HARDCODED_TEST_PASSWORD': `'${UNSAFE_HARDCODED_TEST_PASSWORD}'`,
         'process.env.EXPOSE_SBP': `'${EXPOSE_SBP}'`,
         'process.env.ENABLE_UNSAFE_NULL_CRYPTO': `'${ENABLE_UNSAFE_NULL_CRYPTO}'`,
         'process.env.UNSAFE_TRUST_ALL_MANIFEST_SIGNING_KEYS': `'${UNSAFE_TRUST_ALL_MANIFEST_SIGNING_KEYS}'`
diff --git a/frontend/assets/style/_mixins.scss b/frontend/assets/style/_mixins.scss
index 54c15a9c4b..6bc8d27232 100644
--- a/frontend/assets/style/_mixins.scss
+++ b/frontend/assets/style/_mixins.scss
@@ -16,6 +16,21 @@ $payment-table-desktop-bp: 1290px;
   width: $dimensions;
 }
 
+@mixin tooltip-style-common {
+  position: absolute;
+  top: 0;
+  left: 0;
+  min-width: 3rem;
+  max-width: 12rem;
+  border-radius: 3px;
+  padding: 0.5rem;
+  z-index: 50; // $zindex-tooltip: 50;
+  pointer-events: none;
+  background-color: var(--text_0);
+  opacity: 0.95;
+  color: var(--background_0);
+}
+
 @mixin overflow-touch {
   -webkit-overflow-scrolling: touch;
 }
diff --git a/frontend/views/components/Tooltip.vue b/frontend/views/components/Tooltip.vue
index 03896f215e..902ba82971 100644
--- a/frontend/views/components/Tooltip.vue
+++ b/frontend/views/components/Tooltip.vue
@@ -375,18 +375,7 @@ export default ({
 
 .c-tooltip,
 .c-anchored-tooltip {
-  position: absolute;
-  top: 0;
-  left: 0;
-  min-width: 3rem;
-  max-width: 12rem;
-  border-radius: $radius;
-  padding: 0.5rem;
-  z-index: $zindex-tooltip;
-  pointer-events: none;
-  background-color: $text_0;
-  opacity: 0.95;
-  color: $background_0;
+  @include tooltip-style-common;
 
   &.has-text-center {
     text-align: center;
diff --git a/frontend/views/containers/access/PasswordForm.vue b/frontend/views/containers/access/PasswordForm.vue
index 52e90f69ba..aca27ae32c 100644
--- a/frontend/views/containers/access/PasswordForm.vue
+++ b/frontend/views/containers/access/PasswordForm.vue
@@ -1,8 +1,34 @@
 <template lang='pug'>
-label.field
+component.field(:is='mode === "manual" ? "label" : "div"')
   .label(v-if='label') {{ label }}
+
+  .inputgroup.c-mode-auto(
+    v-if='mode === "auto"'
+    :class='{ "password-copied": ephemeral.showCopyFeedback }'
+    v-error:[name]=''
+  )
+    input.input.with-single-addon.c-auto-password(
+      :class='{ "blurred-text has-ellipsis": ephemeral.pwMode === "text" }'
+      :type='ephemeral.pwMode'
+      :data-test='name'
+      :value='ephemeral.randomPassword'
+      :disabled='true'
+    )
+
+    .addons
+      button.is-success.c-copy-btn(
+        type='button'
+        data-test='copyPassword'
+        @click.stop='copyPassword'
+      )
+        span.c-copied(v-if='ephemeral.showCopyFeedback')
+          i.icon-check-circle
+          i18n Copied
+        i18n.c-copy(v-else) Copy
+
   .inputgroup(
-    v-error:[name]='{ attrs: { "data-test": "badPassword" }}'
+    v-else
+    v-error:[name]=''
   )
     input.input.with-single-addon(
       :type='isLock ? "password" : "text"'
@@ -17,7 +43,6 @@ label.field
     .addons
       button.is-icon(
         type='button'
-        v-if='hasIconRight'
         :aria-label='L("Toggle password visibility")'
         :aria-pressed='!isLock'
         @click.prevent='isLock = !isLock'
@@ -26,13 +51,33 @@ label.field
 </template>
 
 <script>
+import { base58btc } from '@chelonia/multiformats/bases/base58'
+import Tooltip from '@components/Tooltip.vue'
 import validationsDebouncedMixins from '@view-utils/validationsDebouncedMixins.js'
+import { L } from '@common/common.js'
+
+function generateBase58Password (length = 32) {
+  const bytes = crypto.getRandomValues(new Uint8Array((length)))
+  const encoded = base58btc.baseEncode(bytes)
+
+  // Truncate to desired length
+  return encoded.slice(0, length)
+}
 
 export default ({
   name: 'PasswordForm',
+  components: {
+    Tooltip
+  },
   data () {
     return {
-      isLock: true
+      isLock: true,
+      pwCopyTimeoutId: null,
+      ephemeral: {
+        randomPassword: '',
+        showCopyFeedback: false,
+        pwMode: 'text'
+      }
     }
   },
   mixins: [validationsDebouncedMixins],
@@ -42,6 +87,11 @@ export default ({
       required: false,
       default: 'password'
     },
+    mode: {
+      type: String,
+      required: false,
+      default: 'manual' // 'manual' | 'auto'
+    },
     label: {
       type: String,
       required: false
@@ -50,10 +100,6 @@ export default ({
       type: Object,
       required: true
     },
-    hasIconRight: {
-      type: Boolean,
-      default: true
-    },
     showPlaceholder: {
       type: Boolean,
       default: false
@@ -67,15 +113,107 @@ export default ({
       required: false
     }
   },
+  methods: {
+    generateRandomPassword (pwLen = 32) {
+      let genPassword = ''
+
+      if (process.env.NODE_ENV !== 'production' && process.env.UNSAFE_HARDCODED_TEST_PASSWORD === 'true') {
+        // We can optionally use a hardcoded test password for easier debugging/development
+        // so there is no need to memorize random passwords generated for each new account.
+        genPassword = '123456789'
+      } else {
+        genPassword = generateBase58Password(pwLen)
+      }
+
+      this.ephemeral.randomPassword = genPassword
+      this.$v.form[this.name].$model = genPassword
+    },
+    copyPassword () {
+      const pw = this.ephemeral.randomPassword
+      const copyToClipBoard = () => {
+        navigator.clipboard.writeText(pw)
+        this.ephemeral.showCopyFeedback = true
+        this.ephemeral.pwMode = 'password'
+        this.$emit('password-copied')
+
+        clearTimeout(this.pwCopyTimeoutId)
+        this.pwCopyTimeoutId = setTimeout(() => {
+          this.ephemeral.showCopyFeedback = false
+        }, 2000)
+      }
+
+      if (navigator.share) {
+        navigator.share({
+          title: L('Your password'),
+          text: pw
+        }).catch((error) => {
+          console.error('navigator.share failed with:', error)
+          copyToClipBoard()
+        })
+      } else {
+        copyToClipBoard()
+      }
+    }
+  },
   created () {
-    this.isLock = !this.showPassword
+    if (this.mode === 'auto') {
+      this.generateRandomPassword()
+    } else {
+      this.isLock = !this.showPassword
+    }
   }
 }: Object)
 </script>
 
 <style lang="scss" scoped>
-.icon {
-  cursor: pointer;
-  pointer-events: initial !important;
+@import "@assets/style/_variables.scss";
+
+.c-mode-auto {
+  position: relative;
+
+  .c-auto-password {
+    display: block;
+    line-height: 2.75rem;
+    padding-right: 5rem;
+
+    &.blurred-text {
+      color: transparent;
+      text-shadow: 0 0 4px rgba(54, 54, 54, 0.725);
+    }
+  }
+
+  .addons {
+    align-items: center;
+    right: 0.5rem;
+  }
+}
+
+button.c-copy-btn {
+  min-height: unset;
+  height: 1.75rem;
+  border-radius: 3px;
+  padding-left: 0.75rem;
+  padding-right: 0.75rem;
+  overflow: hidden;
+
+  .c-copied {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.25rem;
+  }
+}
+
+.password-copied {
+  .c-auto-password {
+    padding-right: 7rem;
+  }
+
+  button.c-copy-btn {
+    padding-left: 0.75rem;
+  }
+}
+
+.is-dark-theme .c-auto-password.blurred-text {
+  text-shadow: 0 0 3px rgba(255, 255, 255, 0.685);
 }
 </style>
diff --git a/frontend/views/containers/access/PasswordModal.vue b/frontend/views/containers/access/PasswordModal.vue
index 37c8be4993..9c77318d00 100644
--- a/frontend/views/containers/access/PasswordModal.vue
+++ b/frontend/views/containers/access/PasswordModal.vue
@@ -14,7 +14,6 @@ modal-template(class='is-centered is-left-aligned' back-on-mobile=true ref='moda
       :value='form'
       :$v='$v'
       @enter='changePassword'
-      :hasIconRight='true'
       :showPlaceholder='false'
       :showPassword='false'
       size='is-large'
@@ -26,7 +25,6 @@ modal-template(class='is-centered is-left-aligned' back-on-mobile=true ref='moda
       :value='form'
       :$v='$v'
       @enter='changePassword'
-      :hasIconRight='true'
       :showPlaceholder='false'
       :showPassword='false'
       size='is-large'
@@ -38,7 +36,6 @@ modal-template(class='is-centered is-left-aligned' back-on-mobile=true ref='moda
       :value='form'
       :$v='$v'
       @enter='changePassword'
-      :hasIconRight='true'
       :showPlaceholder='false'
       :showPassword='false'
       size='is-large'
diff --git a/frontend/views/containers/access/SignupForm.vue b/frontend/views/containers/access/SignupForm.vue
index a1b910531a..f99e06fda5 100644
--- a/frontend/views/containers/access/SignupForm.vue
+++ b/frontend/views/containers/access/SignupForm.vue
@@ -14,22 +14,37 @@ form(data-test='signup' @submit.prevent='')
       v-error:username='{ attrs: { "data-test": "badUsername" } }'
     )
 
-  .c-password-fields-container
-    password-form(:label='L("Password")' name='password' :$v='$v')
+  .c-auto-password-field-container
+    password-form(
+      mode='auto'
+      name='password'
+      :label='L("This is your password. Save it now.")'
+      :$v='$v'
+      @password-copied='onPasswordCopied'
+    )
 
-    password-form(:label='L("Confirm Password")' name='passwordConfirm' :$v='$v')
+  .c-confirm-check-container
+    label.checkbox
+      input.input(
+        type='checkbox'
+        name='savedPassword'
+        v-model='form.savedPassword'
+        data-test='savedPassword'
+        @click.stop=''
+      )
+      i18n I have saved the password
 
-  label.checkbox
-    input.input(
-      type='checkbox'
-      name='terms'
-      v-model='form.terms'
-      data-test='signTerms'
-      @click.stop=''
-    )
-    i18n(
-      :args='{ a_: `<a class="link" target="_blank" href="${linkToTerms}">`, _a: "</a>"}'
-    ) I agree to the {a_}terms and conditions{_a}
+    label.checkbox
+      input.input(
+        type='checkbox'
+        name='terms'
+        v-model='form.terms'
+        data-test='signTerms'
+        @click.stop=''
+      )
+      i18n(
+        :args='{ a_: `<a class="link" target="_blank" href="${linkToTerms}">`, _a: "</a>"}'
+      ) I agree to the {a_}terms and conditions{_a}
 
   banner-scoped(ref='formMsg' allow-a)
 
@@ -37,14 +52,14 @@ form(data-test='signup' @submit.prevent='')
     button-submit(
       @click='signup'
       data-test='signSubmit'
-      :disabled='$v.form.$invalid'
+      :disabled='$v.form.$invalid || !ephemeral.passwordCopied'
     ) {{ L('Create an account') }}
 </template>
 
 <script>
 import sbp from '@sbp/sbp'
 import { L } from '@common/common.js'
-import { maxLength, minLength, required, sameAs } from 'vuelidate/lib/validators'
+import { maxLength, minLength, required } from 'vuelidate/lib/validators'
 import { validationMixin } from 'vuelidate'
 import PasswordForm from '@containers/access/PasswordForm.vue'
 import BannerScoped from '@components/banners/BannerScoped.vue'
@@ -107,10 +122,13 @@ export default ({
       form: {
         username: '',
         password: '',
-        passwordConfirm: '',
+        savedPassword: false,
         terms: false,
         pictureBase64: ''
       },
+      ephemeral: {
+        passwordCopied: false
+      },
       linkToTerms: ALLOWED_URLS.TERMS_PAGE,
       usernameAsyncValidation: {
         timer: null,
@@ -119,6 +137,9 @@ export default ({
     }
   },
   methods: {
+    onPasswordCopied () {
+      this.ephemeral.passwordCopied = true
+    },
     async signup () {
       if (this.$v.form.$invalid) {
         this.$refs.formMsg.danger(L('The form is invalid.'))
@@ -175,13 +196,11 @@ export default ({
           [L('A password is required.')]: required,
           [L('Your password must be at least {minChars} characters long.', { minChars: passwordMinChars })]: minLength(passwordMinChars)
         },
-        passwordConfirm: {
-          [L('Passwords do not match.')]: sameAs('password')
+        savedPassword: {
+          [L('Please save the password.')]: (value) => Boolean(value)
         },
         terms: {
-          [L('You need to agree to the terms and conditions.')]: (value) => {
-            return Boolean(value)
-          }
+          [L('You need to agree to the terms and conditions.')]: (value) => Boolean(value)
         }
       }
     }
@@ -208,4 +227,16 @@ export default ({
     margin-bottom: 1.5rem;
   }
 }
+
+.c-auto-password-field-container {
+  margin: 1.5rem 0;
+}
+
+.c-confirm-check-container {
+  position: relative;
+  display: flex;
+  flex-direction: column;
+  row-gap: 0.5rem;
+  margin-bottom: 2rem;
+}
 </style>
diff --git a/frontend/views/containers/user-settings/AccountRemovalModal.vue b/frontend/views/containers/user-settings/AccountRemovalModal.vue
index 753b580c48..f68ec9cfcb 100644
--- a/frontend/views/containers/user-settings/AccountRemovalModal.vue
+++ b/frontend/views/containers/user-settings/AccountRemovalModal.vue
@@ -40,7 +40,6 @@
         :label='L("Password")'
         :value='form'
         :$v='$v'
-        :hasIconRight='true'
         :showPlaceholder='false'
         :showPassword='false'
         size='is-large'
diff --git a/package-lock.json b/package-lock.json
index e4c52c4d93..7ced1d0c50 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "group-income",
-  "version": "2.0.2",
+  "version": "2.0.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "group-income",
-      "version": "2.0.2",
+      "version": "2.0.4",
       "license": "AGPL-3.0",
       "dependencies": {
         "@apeleghq/rfc8188": "1.0.7",
diff --git a/test/cypress/integration/signup-and-login.spec.js b/test/cypress/integration/signup-and-login.spec.js
index 0574529c21..40ed47b765 100644
--- a/test/cypress/integration/signup-and-login.spec.js
+++ b/test/cypress/integration/signup-and-login.spec.js
@@ -4,10 +4,14 @@ describe('Signup, Profile and Login', () => {
   // users and groups that are created during test...
   const userId = performance.now().toFixed(20).replace('.', '')
   const username = `user1-${userId}`
+  const pwStore = {} // { username: password }
 
   it('user1 signups and creates a group', () => {
     cy.visit('/')
     cy.giSignup(username)
+    cy.window().then(win => {
+      pwStore[username] = win.sessionStorage.getItem(`cy__pw__${username}`)
+    })
 
     cy.giCreateGroup('Dreamers', { bypassUI: true })
     cy.getByDT('profileName').should('contain', username)
@@ -15,7 +19,7 @@ describe('Signup, Profile and Login', () => {
 
   it('user1 does logout and login again', () => {
     cy.giLogout()
-    cy.giLogin(username)
+    cy.giLogin(username, { password: pwStore[username] })
   })
 
   it('user1 changes avatar and profile settings', () => {
@@ -53,24 +57,35 @@ describe('Signup, Profile and Login', () => {
     cy.giLogout({ bypassUI: true })
   })
 
-  it('sign up button remains disabled if passwords are not the same or terms are not agreed', () => {
+  it('sign up button remains disabled if terms are not agreed or you have not saved the password', () => {
     const user2 = `user2-${userId}`
-    const password = '123456789'
-    const wrongPassword = 'wRoNgPaSsWoRd123'
 
     cy.getByDT('signupBtn').click()
 
     cy.getByDT('signName').type(user2)
-    cy.getByDT('password').type(password)
-    cy.getByDT('passwordConfirm').type(wrongPassword)
+    // Auto-generated password should be 32 characters long.
+    cy.getByDT('password').invoke('val').should('have.length', 32)
+    cy.getByDT('signSubmit').should('be.disabled')
+
+    cy.getByDT('savedPassword').check({ force: true }).should('be.checked')
     cy.getByDT('signTerms').check({ force: true }).should('be.checked')
     cy.getByDT('signSubmit').should('be.disabled')
 
-    cy.getByDT('passwordConfirm').type('{selectall}{del}' + password)
+    // 1. Clicking the copy password button is mandatory to enable the sign up button.
+    cy.getByDT('copyPassword').click()
+    cy.getByDT('signSubmit').should('not.be.disabled')
+
+    // 2. If the terms and conditions checkbox is unchecked, the sign up button gets disabled.
     cy.getByDT('signTerms').uncheck({ force: true }).should('not.be.checked')
     cy.getByDT('signSubmit').should('be.disabled')
 
+    // 3. If the saved password checkbox is unchecked, the sign up button gets disabled.
     cy.getByDT('signTerms').check({ force: true }).should('be.checked')
+    cy.getByDT('savedPassword').uncheck({ force: true }).should('not.be.checked')
+    cy.getByDT('signSubmit').should('be.disabled')
+
+    // Once all conditions for 1, 2 and 3 above are met, the sign up button becomes enabled.
+    cy.getByDT('savedPassword').check({ force: true }).should('be.checked')
     cy.getByDT('signSubmit').should('not.be.disabled')
 
     cy.closeModal()
@@ -115,11 +130,13 @@ describe('Signup, Profile and Login', () => {
   })
 
   it('change user password', () => {
-    cy.giLogin(username)
+    const oldPassword = pwStore[username]
+    const newPassword = 'abcdefghi'
+
+    cy.giLogin(username, { password: oldPassword })
     cy.getByDT('settingsBtn').click()
     cy.getByDT('passwordBtn').click()
-    const oldPassword = '123456789'
-    const newPassword = 'abcdefghi'
+
     cy.getByDT('PasswordModal').within(() => {
       cy.getByDT('current').type('{selectall}{del}' + oldPassword)
       cy.getByDT('newPassword').type('{selectall}{del}' + newPassword)
diff --git a/test/cypress/support/commands.js b/test/cypress/support/commands.js
index 0bbcd45c94..40f06d2aa1 100644
--- a/test/cypress/support/commands.js
+++ b/test/cypress/support/commands.js
@@ -207,8 +207,16 @@ Cypress.Commands.add('giSignup', (username, {
       cy.getByDT('signupBtn').click()
     }
     cy.getByDT('signName').type('{selectall}{del}' + username)
-    cy.getByDT('password').type(password)
-    cy.getByDT('passwordConfirm').type(password)
+    // If bypassUI option is not used, check if the auto-generated password is 32 characters long.
+    cy.getByDT('password').invoke('val').then(pw => {
+      expect(pw).to.have.length(32)
+      cy.window().then(win => {
+        win.sessionStorage.setItem(`cy__pw__${username}`, pw)
+      })
+    })
+
+    cy.getByDT('copyPassword').click()
+    cy.getByDT('savedPassword').check({ force: true }).should('be.checked')
     cy.getByDT('signTerms').check({ force: true }).should('be.checked')
 
     cy.getByDT('signSubmit').click()