diff --git a/server/handlers.go b/server/handlers.go
index acbf4ecb73..4d93499220 100755
--- a/server/handlers.go
+++ b/server/handlers.go
@@ -357,6 +357,7 @@ func (s *Server) handlePasswordLogin(w http.ResponseWriter, r *http.Request) {
 			if err := s.templates.password(r, w, r.URL.String(), username, usernamePrompt(pwConn), true, backLink); err != nil {
 				s.logger.Errorf("Server template error: %v", err)
 			}
+			s.logger.Errorf("Failed login attempt for user: %q. Invalid credentials.", username)
 			return
 		}
 		redirectURL, err := s.finalizeLogin(identity, authReq, conn.Connector)