WCAG 3.3.8 requires that authentication processes do not rely on cognitive function tests—such as memorizing passwords, solving puzzles, or transcribing characters—unless an alternative method or assistance is available. This protects users with cognitive disabilities from being locked out of digital services.

WCAG 3.3.8: Accessible Authentication (Minimum)

WCAG 3.3.9 requires that authentication processes involve no cognitive function test whatsoever — no puzzles, memorization, or transcription — unless a non-cognitive alternative, an assistive mechanism, or an object-based method is available. This Enhanced (AAA) criterion eliminates the last barriers to authentication for users with cognitive, motor, and memory-related disabilities.

Authentication

WCAG 3.3.8: Accessible Authentication (Minimum)

WCAG 3.3.9: Accessible Authentication (Enhanced)