Whenever prompted with a password input, I always double check to ensure that the site I am on is the correct one. It is way too easy to set up a phishing scam site as you just need to copy and paste the relevant code and it would work.

Especially when handling anything that translates into money.. Better safe than sorry.