You must enter your current password to prove that it's you, then enter your new password twice to make sure that you didn't make a mistake.