Accessible Authentication

Accessible authentication means enabling people to sign in or verify identity without unnecessary cognitive or sensory barriers. WCAG 2.2 Success Criterion 3.3.8, Accessible Authentication (Minimum), is a Level AA requirement: if an authentication step uses a cognitive-function test, such as recalling a password or solving a puzzle, at least one permitted alternative, assistance mechanism, object-recognition option, or personal-content exception must apply. Supporting password managers, autofill, and copy-and-paste can reduce the need to memorize or retype information. This does not prohibit all passwords or multi-factor authentication; the accessibility of the complete login flow depends on how each step is designed. A customer portal should avoid inaccessible puzzles and should test real keyboard, screen-reader, and recovery experiences. Compliance with one WCAG criterion alone does not establish overall accessibility.