Login and password reminder forms should tell you if your email is not registered
Currently if you click the "forgot password" thing it says something like this:
If your email is registered, a password reset email will have been sent to it.
This is rather annoying - half the time I use "forgot password" things is when actually I never registered. This is true for the login page itself - if you try to log in with an email address it currently says Invalid login or password. It knows perfectly well if I put in an email that isn't registered, and it would save a lot of time if it would tell me - then I don't spend ages trying to remember my password when there isn't even an account!
Preemptive responses:
-
You should use a password manager.
- Sure blame the user.
-
But then I'd know if a given email was signed up to Gitlab!!
- Who cares? This isn't Tinder.
- You can already tell that using a super obvious method that for some reason nobody considers when they use this cargo cult design.