What WCAG 3.3.8 Requires
Authentication cannot rely only on a cognitive function test (remembering a password, solving a puzzle) unless an alternative is provided, such as allowing password managers, copy-paste, or a non-text alternative like a biometric option.
New to this criterion? Read our plain-English guide, WCAG 3.3.8 Accessible Authentication (Minimum) Explained in Plain English, with examples and code.
Can AccessBell Test This Automatically?
Not fully. Like most WCAG criteria that depend on meaning or context, this one needs a person to judge. AccessBell's report lists it for manual review rather than marking it pass or fail automatically, so it never gets missed.
How to Test It by Hand
Check that a login form allows pasting passwords and does not block password managers or require solving a puzzle with no alternative.
Common Failures
- A login field disables paste, forcing manual retyping of a password from a password manager.
- A CAPTCHA with no accessible alternative is the only way to prove you are human.
Related Criteria in Input Assistance
WCAG 3.3.8 Questions
What does WCAG 3.3.8 require?
Authentication cannot rely only on a cognitive function test (remembering a password, solving a puzzle) unless an alternative is provided, such as allowing password managers, copy-paste, or a non-text alternative like a biometric option.
Can AccessBell test WCAG 3.3.8 automatically?
Not fully. This criterion needs a person to judge, so AccessBell's report lists it for manual review rather than marking it pass or fail on its own.
What level is WCAG 3.3.8?
Level AA, added in WCAG 2.2. Level AA is required to meet WCAG AA, the level referenced by the ADA, Section 508 and most accessibility laws.
Sources
- W3C: Understanding 3.3.8 Accessible Authentication (Minimum) (opens in a new tab)
- W3C: Web Content Accessibility Guidelines (WCAG) 2.2 (opens in a new tab)
This page explains a technical standard and is not legal advice. See our disclaimer.