No Error Message Displayed for Non-Existent User in Passwordless Login

Overview

When using the Universal Login with passwordless login and the sign-up option disabled, the system requests a code even if an incorrect or non-existent email address is entered. No error message appears on the login widget. This article clarifies whether this behavior is intended.

Applies To

 

  • Passwordless Login

  • Email Connection

  • Sign-up Disabled

Solution

This is the default behavior in the New Universal Login experience and cannot be changed. This design is intentional and prevents enumeration attacks.

The Classic Universal Login experience functions differently and allows for error message customization. The error message serves as a fallback for errors not listed in the GitHub repository source code.

To request a feature change, submit a request to the Product Feedback page.

Recommended content

No recommended content found...