Title: Invalid User/Password
Last modified: August 18, 2016

---

# Invalid User/Password

 *  [ifelse](https://wordpress.org/support/users/ifelse/)
 * (@ifelse)
 * [21 years, 3 months ago](https://wordpress.org/support/topic/invalid-userpassword/)
 * Here’s a minor suggestion for the WP team:
 * WP’s error messages are a bit too helpful with incorrect logins. If you type 
   in an incorrect username, WP outputs “Error: Wrong login”. This is fine so far.
 * However, if you type the wrong password, you get a different message, namely “
   Error: Incorrect password”. This means that a possible attacker can be certain
   that they have correctly identified a valid user and can focus on working on 
   finding the correct password.
 * What I’d suggest is that, following the login patterns of other programs and 
   sites, is that a generic “incorrect login detail” message should instead be used.

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Moderator [James Huff](https://wordpress.org/support/users/macmanx/)
 * (@macmanx)
 * [21 years, 3 months ago](https://wordpress.org/support/topic/invalid-userpassword/#post-171023)
 * That’s a good idea. Please send your feature request to: [http://mosquito.wordpress.org/main_page.php](http://mosquito.wordpress.org/main_page.php)
 *  Thread Starter [ifelse](https://wordpress.org/support/users/ifelse/)
 * (@ifelse)
 * [21 years, 3 months ago](https://wordpress.org/support/topic/invalid-userpassword/#post-171026)
 * Hmmm, did a quick search on Mosquito before submitting. It appears that it’s 
   [already been submitted](http://mosquito.wordpress.org/view.php?id=1129) and 
   been set to ‘won’t fix’ on the grounds that _“They can figure out usernames a
   million easier ways”_.
 * A bit of a shame as it would be trivial to resolve but I understand the reasoning.
 *  [laurenmclaughlin](https://wordpress.org/support/users/laurenmclaughlin/)
 * (@laurenmclaughlin)
 * [20 years, 7 months ago](https://wordpress.org/support/topic/invalid-userpassword/#post-171900)
 * Help. My blog is not acknowledging my username even though I am using that username
   to log into my account on the wordpress website. I am locked out of my own website.
   What do I do?

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Invalid User/Password’ is closed to new replies.

 * In: [Requests and Feedback](https://wordpress.org/support/forum/requests-and-feedback/)
 * 3 replies
 * 3 participants
 * Last reply from: [laurenmclaughlin](https://wordpress.org/support/users/laurenmclaughlin/)
 * Last activity: [20 years, 7 months ago](https://wordpress.org/support/topic/invalid-userpassword/#post-171900)
 * Status: not a support question

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics