Why does TOAD 12.10.0.30 take so long to report ORA-01017 invalid username/password?

We don’t add any delay. If there is an error, we post it immediately. My guess in your situation is that the “Connect” command isn’t spooled until it is kicked back from Oracle with the error.

Are SQL*Plus and Toad using the same Oracle client?