Confirm Password on Set Password Form
You could use the craft()-&gt;userSession-&gt;setFlash('your message here'); functionality. 

How it works is explained in this or this answer for example but it boils down to setting the message in your event handler and then checking in your template if there's a message and if there's one, display it.