The only thing worse than that is 2 factor authentication of captcha's."Password is incorrect."
"Password is incorrect."
"Password is incorrect."
"Clicks forgot password."
"Changes password."
"New password can't be old password."
Up here that statement might not always be yes!