There's no way of knowing if a password is valid without the matching username. That doesn't make any sense.