2015-06-07_20-09-42.cs

if (string.IsNullOrEmpty(newPassword)){
	validation.Add("Please choose a new password.");
}
else if (string.IsNullOrEmpty(confirmPassword)){
	validation.Add("Please confirm your password.");
}
else{
	// now we know that newPassword and confirmPassword have contents, lets check them.
	if (newPassword != confirmPassword){
		validation.Add("Your new password and confirmed password do not match.");
	}
	// idk if you want to, but if you're checking password requirements, you want to here.
	else if (!PasswordValidator.IsValid(newPassword)){
		validation.Add("Your password does not meet the requirements.");
	}
	else {
		if (Hasher.HashPassword(oldPassword, Hash.Basic /*idk what you use*/) != target.PasswordHash){
			validation.Add("Your password is incorrect. We could not update your password.")
		}
		else{
			target.PasswordHash = Hasher.HashPassword(newPassword, Hash.Basic);
			redisUser.UpdateUser(target);
			return RedirectToAction("Profile");
		}
	}
}

ViewData["validationSummary"] = validation.ToArray();
return View();