How to perform functional testing of login functionality in any application?

1. 8 combinations of email address/mobile number and password should be tested namely:
a. Correct email address and correct password
b. Correct email address and incorrect password
c. Incorrect email address and correct password
d. Incorrect email address and incorrect password
e. Correct mobile number and correct password
f. Correct mobile Number and incorrect password
g. Incorrect mobile number and correct password
h. Incorrect mobile number and incorrect password
2. Account lock feature: Account should get locked after 3 or 5 combinations of:
a. Correct email address and incorrect password
b. Correct mobile Number and incorrect password
So that hackers won’t get the opportunity to log into someone else’s account.
3. Error message should be “Incorrect email id or password” or “Incorrect mobile number or password” in following 6 combinations:
a. Correct email address and incorrect password
b. Incorrect email address and correct password
c. Incorrect email address and incorrect password
d. Correct mobile Number and incorrect password
e. Incorrect mobile number and correct password
f. Incorrect mobile number and incorrect password
4. Checking for cosmetic errors like spelling mistakes, size of the textboxes for entering login credentials etc.