Level AASince WCAG 2.2New in 2.2
3.3.8 Accessible Authentication (Minimum)
Guideline 3.3: Input Assistance – Forms help people avoid and correct mistakes.
What does the rule require?
Logging in does not require a memory or thinking test: no typing a password from memory, no puzzle – unless there is an alternative or help. Still allowed at this level: recognising objects or content you provided yourself.
How to get it right
Allow password managers and pasting. Offer passkeys or a login link by email.
Who benefits most?
- People with cognitive disabilities
- People with dyslexia
Official wording
This page explains the rule in simple words. Only the original W3C text is normative.
- “Understanding Accessible Authentication (Minimum)” at W3C (external site)
- Techniques in the WCAG Quick Reference (external site)