WCAG 2.2 · Level AA · Understandable

WCAG 3.3.8 — Accessible Authentication (Minimum)

Authentication must not require a cognitive function test (like remembering or transcribing) without an alternative.

WCAG 3.3.8 at a glance

Level AA · Principle: Understandable · Added in WCAG 2.2. Level AA is the conformance target for the ADA, EAA, and Section 508.

What it means

Authentication must not require a cognitive function test (like remembering or transcribing) without an alternative.

Who it helps

Users with cognitive disabilities.

Common failures

  • “Enter the 3rd, 5th, 7th character of your password”
  • Blocking password-manager paste

How to meet WCAG 3.3.8

  1. Allow paste and password managers
  2. Support copy/paste, links, or biometrics

How to test it

Manual.

Frequently asked questions

Is WCAG 3.3.8 Level A or AA?
WCAG 3.3.8 (Accessible Authentication (Minimum)) is a Level AA success criterion, introduced in WCAG 2.2. Level AA is the standard required by the ADA, EAA, and Section 508.
How do I test WCAG 3.3.8?
Manual.

Stay ahead of accessibility rules

Practical WCAG, ADA & EAA updates, new free tools, and plain-English guides — occasional emails, no spam.