I think the idea is that you don't know which field has the correct password, so a general error is raised. Does that provide you with enough help?