Yes, that’s true. But if you don’t let the users know if their password is good or bad how are they supposed to correct it>