Closed janicedatawire closed 8 years ago
It would be nice to indicate that an account doesn't exist when that's the reason a login attempt fails. Currently we just say "wrong password or email" when it doesn't exist, the same error we give for bad passwords.
Sadly, telling people that the email doesn't exist is a security issue. :|
It would be nice to indicate that an account doesn't exist when that's the reason a login attempt fails. Currently we just say "wrong password or email" when it doesn't exist, the same error we give for bad passwords.