Errors from auth0 form are not useful

Hello,

I use the Auth0 form to allow users to sign-up and sign in.

I realized that when a user is already registered, the displayed error is “Something went wrong, please try again later”. Displaying in the error message that the user already exists would be better. Furthermore, retrying later will never unblock the user.

Is there a way to enable useful error messages? I searched without success.

Hi @anthony.p,

Welcome to the Auth0 Community!

The generic “Something went wrong, please try again later” error is by design to prevent user enumeration attacks.

If a threat actor is aware that a user exists, then they can perform an authentication attack against them, such as brute-force.

If you need to modify the text, you can refer the Customize New Universal Login Text Prompts documentation.

Please let me know if you have any additional questions.

Thanks,
Rueben

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.