If the password is entered incorrectly, the account is correct, or the account is shown as not being there, what should I write in the rules?
When the password is entered incorrectly, a password error will be displayed instead of not having the account
First determine whether the account exists, and then determine whether the password is correct based on the existing user.
My rough opinion.