On websites that separate the screens where username and password are entered, such as GMail, it is possible that the users type the password in the username field because the username is sometimes suggested automatically based on the browsing history.
In that situation, what are the risks if the user types (and press Enter) their password in the username field?
Reply to "duplicate" flag
I don't see how the questions about typing a password into a username field in a website and in Windows logon can be duplicate one of the other. Questions are duplicate if they ask the same thing, not if the answers happen to be the same.
If the answers happened to be the same, I believe the proper way to answer this would be: "The risks are the same as when the password is typed on Windows logon. Please refer to this question (link to the other question)".
Anyway, the answer to the duplicated question doesn't even answer the present question, as that refers to eventvwr.msc and Failure Auditing in Windows.