How to catch username or password using hook_form_alter
You can use in VALIDATE function like 

$form['#validate'][] = 'mymodule_user_validate';


In this you can all values even if there is no successful values in it.
But remember to call your function first before default validate function.