2015 Vice article reveals Spotify allows for brute-force password collection. There is still no login failure/password reset to this day. More details in comments.

This comment was posted to reddit on Feb 04, 2017 at 5:32 am and was deleted within 14 hour(s) and 35 minutes.

Here's a sneak peek of /r/spotify using the top posts of the year!

^{^I'm} ^{^a} ^{^bot,} ^{^beep} ^{^boop} ^{^|} ^{^Downvote} ^{^to} ^{^remove} ^{^|} ^{^Contact} ^{^me} ^{^|} ^{^Info} ^{^|} ^{^Opt-out}