Possible Test Cases for Login Page- Expert Guide

Make sure all labels and controls are visible on the login page, including text boxes, buttons, and links.
Make sure the font and size of the label and the text written on the various items are clearly visible.
Make sure the sizes, colors, and UI of the various elements are within specifications.
Make sure your application UI is responsive i.e must adapt to different screen resolutions and devices.

Verify that when login page opens, by default the cursor should be on the username textbox.
Verify that the user is able to redirect or access the different controls by clicking the ‘Tab’ key from keyboard.
Verify if the password is in encrypted form when typed in the password textbox.
Verify if use can copy-paste password or not.
Verify that the user is able to login to application with valid credentials and clicking on the ‘Login’ button.
Verify that the user is able to login to application with valid credentials and pressing Enter key.
Verify that the user is not able to login to application with an invalid username and password.
Verify that the validation message should be displayed in case the username or password field are blank.
Verify that the validation message should be displayed if user exceeds the character limit of the user name and password fields.
Verify the functionality of reset button on the login page. On clicking it the textbox’s content should get clear.
Verify if there is a “remember password” on the login page.
Verify on closing the browser authenticated user should not log-out from application. Opening the application should keep the user to login state only.

Verify that there is a limit on the total number of unsuccessful attempts. So that brute-force mechanism to try all possible combinations of username-password can be avoided.
Verify in case of incorrect credentials, a message like “incorrect username or password” should appear. Exact message like “incorrect password” will help a hacker in knowing that the username is correct.With this, he will just try a different combination of the password only.
Verify the login session timeout duration.
Verify back button should not logout the user.

Below are some of the other Useful blogs: