I get you're probably trying to prevent people from spamming.. However, things like this will serve to exclude legitimate users. For instance, i'm not comfortable giving my phone number, and any time something asks me for my password, without telling me why it needs it, that's an automatic red flag. It's not just an inconvenience, it's a deal-breaker.