I am facing an issue, Some of registered customers are unable to login in website, They getting error message
invalid login or password
and every time there is need to reset password from backend
Any one have suggestion why this happen.
Search for $customer->setPassword() in community or local directories as a plugin or extension might be using it to set password.
Malacious code might be resetting your customer's password .