Login Page Test Cases — The Complete 2026 Template

2026-07-17 · By Avinash Kamble, reviewed by Priyanka G.

Every QA engineer eventually writes login test cases. Here is the canonical list — 60+ cases across six categories — that senior testers reuse across projects.

1. Valid email + valid password → success
2. Remember me checked → session persists after browser close
3. Login with social (Google) → success
4. Login redirects to previous page
5. Login with unicode email (café@example.com)

Invalid email format, empty email, empty password,
wrong password, wrong email, both empty,
password with leading/trailing spaces, SQL injection,
XSS payload in email, password > 200 chars,
disabled account, unverified email.

Rate limiting after 5 failed attempts,
CSRF token required, HTTPS enforced,
password never logged, no user enumeration
(same error for wrong email vs wrong password),
session cookie httpOnly + Secure + SameSite,
JWT expiry enforced, session fixation prevented,
brute-force lockout, 2FA fallback.

Keyboard-only navigation, screen reader reads labels,
error messages announced via aria-live,
sufficient colour contrast (WCAG AA),
form labels correctly associated,
autocomplete attributes present,
zoom to 200% remains usable,
password visibility toggle keyboard accessible.

Full 60-case CSV is one click away in the AI Test Case Generator — pick "Login page" preset and export.