Ok that's fine for username and password, your condition works very well, thanks !

But for email change, we have a problem with the trigger.
We use reconfirm_onAfterConfirm with user automatic for everybody, no conditions, and we need to access [email]
the auto action with this trigger does not fire
do we need to add references, reload user object, use another substitution ?

But if I need to access other substitutions like [cb_refid] for instance, should I use [var1_email] and reload user object for [cb_refid] ?

I have some difficulties with this one

Accessing [var1_email] gives the old email address, so is this [var2_to] or [var2_email] to get the new email after reconfirmation ?

Thanks a lot, got it with [var2_to]
For info do you always follow var_database_field as a notation in CB ?

This will answer to lots of questions