# WCAG 2.2 – 3.3.8 Accessible Authentication (Minimum)

- Level: AA
- Principle: 3 Understandable
- Guideline: 3.3 Input Assistance
- Introduced in: WCAG 2.2

## What the rule requires

Logging in does not require a memory or thinking test: no typing a password from memory, no puzzle – unless there is an alternative or help. Still allowed at this level: recognising objects or content you provided yourself.

## How to get it right

Allow password managers and pasting. Offer passkeys or a login link by email.

## Who benefits

- People with cognitive disabilities
- People with dyslexia

## Sources

- [This rule on wcag.dehl.net](https://wcag.dehl.net/en/wcag/3-3-8/)
- [Official W3C explanation](https://www.w3.org/WAI/WCAG22/Understanding/accessible-authentication-minimum)
- [Techniques (WCAG Quick Reference)](https://www.w3.org/WAI/WCAG22/quickref/#accessible-authentication-minimum)

_Plain-language explanation. Only the original W3C text is normative._