title: Which error message is better when users entered a wrong password?
body: <p>Is there any differences between the following two error messages from security point of view when users entered a wrong password?</p>
  <blockquote>
  <p>Wrong username or password.</p>
  <p>Wrong password.</p>
  </blockquote>
  <p>For example, when you enter a wrong password on the <code>Gmail.com</code>, it will tell you &quot;The username or password you entered is incorrect&quot;.</p>
  <p>Is there any considerations for security reasons? I think the error message: &quot;The password you entered is incorrect&quot; is more clear to users, And, What's more, it's very easy to check whether a username is exists on the <code>Gmail.com</code>: just click &quot;Can't access your account?&quot; and enter the username. If the username doesn't exists, it will tell you.</p>