WCAG 3.3.8
Level AA
Understandable
3.3.8 Accessible Authentication (Minimum)
No cognitive function test (like remembering a password or solving a puzzle) is required to log in, unless an alternative exists.
What 3.3.8 Accessible Authentication (Minimum) means
Users can authenticate without memory/transcription puzzles.
How to test
Check login supports password managers/paste, and does not force CAPTCHAs without alternatives.
How to meet it
Allow paste and password managers; offer alternatives to cognitive-test CAPTCHAs (e.g. email link, passkeys).
Need help meeting 3.3.8?
Our IAAP-certified team audits your website and apps against every WCAG 2.2 criterion and delivers code-level remediation.
Official reference: Understanding 3.3.8 Accessible Authentication (Minimum) (W3C)
More Understandable criteria
3.1.1 Language of Page
3.1.2 Language of Parts
3.2.1 On Focus
3.2.2 On Input
3.2.3 Consistent Navigation
3.2.4 Consistent Identification
3.2.6 Consistent Help
3.3.1 Error Identification
3.3.2 Labels or Instructions
3.3.3 Error Suggestion
3.3.4 Error Prevention (Legal, Financial, Data)
3.3.7 Redundant Entry