FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login

    Any way to customize fail logins message?

    Scheduled Pinned Locked Moved Solved
    Q&A
    1
    2
    244
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • danD
      dan
      last edited by

      Hi,

      There's no way to customize the behavior of failed logins so that users can differentiate between "your password is bad" and "user not found", correct?

      --
      FusionAuth - Auth for devs, built by devs.
      https://fusionauth.io

      danD 1 Reply Last reply Reply Quote 0
      • danD
        dan @dan
        last edited by

        That is correct. For security reasons, we do not provide feedback if the user exists but the password is incorrect, vs the situation where user does not exist.

        This is true both in the hosted login pages and the login API response codes. That's what we recommend if you build your own pages as well.

        --
        FusionAuth - Auth for devs, built by devs.
        https://fusionauth.io

        1 Reply Last reply Reply Quote 0
        • danD dan has marked this topic as solved on
        • First post
          Last post