I feel like "password does not match value on record" or similar is pedantic in this case since there's only one way for authentication to fail: password mismatch.