@Joe, The controller class has a redirect for success scenario and not for fail. If the fail clause is handled before the final return, then you can add some comment on the same page to show an error/information msg on this same page. This link has some insights too: Forgot password page on visualforceForgot password page on visualforce