 <p>You don't need to confirm password for the login $rules array.</p> <pre><code>$rules = array( 'username' =&gt; 'required|email|exists:users', 'password' =&gt; 'required', ); </code></pre> <p>This should work for the postLogin validation rules.</p>