Username once, password once, and email address once. If by some twist of fate I enter my password wrong, they have my email address. They send a confirmation email right away, while I'm still on the signup page, so if I got my email address wrong and that confirmation bounces, I get notified, and I have a chance to correct it (since I'm logged in after account creation).