Registry · Understandable

3.3.8 — Accessible Authentication (Minimum)

Level AA Understandable

Operational summary

FOR EACH authentication step, avoid mandatory cognitive tests OR supply a non-cognitive alternative, an assisting mechanism, or an allowed object-recognition/personal-content route. Review password-manager and paste support, including one-time codes. The allowed alternatives do not remove other criteria.

This is an original implementation summary, not replacement normative text. The sources below supply the precise requirement, its definitions and its qualifications.

Primary sources

• Normative text — W3C WCAG 2.2 Recommendation
• Understanding 3.3.8 — explanatory guidance

Registry record

Applicability and assessment start unset by design — no product has been evaluated. Instantiate the entry for an actual product, assign an owner and retain evidence.

{
  "criterion_id": "3.3.8",
  "level": "AA",
  "name": "Accessible Authentication (Minimum)",
  "rule_definition": "../03-WCAG22-AA-REGISTRY.md#sc-3-3-8",
  "normative_source": "https://www.w3.org/TR/WCAG22/#accessible-authentication-minimum",
  "understanding_source": "https://www.w3.org/WAI/WCAG22/Understanding/accessible-authentication-minimum.html",
  "applicability_status": "NOT_EVALUATED",
  "assessment_status": "NOT_TESTED",
  "owner": null,
  "test_instance_ids": [],
  "exception_evidence_ids": []
}

This criterion as JSON →