Invalid Login Credentials
Verify that the system properly rejects login attempts with incorrect credentials and provides appropriate feedback without revealing which field is wrong (security best practice).
Preconditions
- You are on the login page
- You know a valid email that exists in the system
Test Data
Use a correct email with an incorrect password, then try a non-existent email.Test Steps
Follow each step carefully
Navigate to the login page
Click "Log In" in navigation
Login form is displayed
Enter a registered email address
Email field
Email is accepted in the field
Enter an INCORRECT password (intentionally wrong)
Password field
We are testing the error handling, so use a wrong password on purpose
Click the "Sign In" button
Primary login button
Form submits and processes
Expected Result
Security requirements: (1) Generic error message appears: "Invalid email or password" - NOT "Password is incorrect" (prevents email enumeration), (2) User remains on login page, (3) Password field is cleared, (4) After multiple failed attempts (usually 5), account may be temporarily locked or CAPTCHA required, (5) No detailed error about which field is wrong.
Ready to Complete?
Click when you have verified all steps and the expected result.
Test Info
- Module
- Authentication
- Steps
- 4
- Duration
- 2 min
- XP Value
- +30