Passwords do not match
Client-side check on the reset-password form (and similar UIs): new password and confirm password are not equal (auth.passwordsDoNotMatch).
Why this happens
Typo in one of the two fields before submit. Request never reaches the API. Distinct from Invalid password / Current password is incorrect (server hash checks).
Diagnose and fix
1. Re-type both fields carefully (or paste once into both).
2. Meet minimum length (usually 8+).
3. If the reset token is missing, fix Invalid reset link first.