facebook handles this case by showing the profile picture of the user matching t...

		crumpled on Dec 1, 2014 \| parent \| context \| favorite \| on: “Invalid username or password” is a useless securi... facebook handles this case by showing the profile picture of the user matching the email field. banks and yahoo handle this case by showing a magic image that you chose, which also provides anti-phishing feedback