Back to overview
Contents
3.3.9
—
Accessible Authentication (Enhanced)
Enhanced Accessible Authentication
Ensure authentication processes avoid requiring users to recognize objects or media, making it easier for those with cognitive disabilities.
Acceptance Criteria
- Authentication methods must not require users to recognize objects, images, or non-text media.
If cognitive function tests (CAPTCHA's for example) are used, they must be accompanied by:
- Alternative Method: An alternative authentication method that does not rely on cognitive tasks.
- Assistance Mechanism: A mechanism to assist users in completing any cognitive tasks if used.
Examples
- Alternative Method: Provide options like biometric authentication (e.g., facial recognition, fingerprints) or passcode entry.
- Assistance Mechanism: Offer support tools for managing passwords, such as password managers or copy-pasting features.
Exceptions
- Cognitive Function Test: Cognitive tasks can be included if they are supported by alternative methods or mechanisms that assist users.
- Security Necessity: If security concerns necessitate cognitive tasks, they must be paired with supportive mechanisms.
Tips
- Ensure that no part of the authentication process relies on recognizing previously provided images or media.
- Implement easy-to-use alternative methods such as biometric authentication to reduce cognitive load.
- Support user-friendly tools and mechanisms that simplify the authentication process.
How to test?
- Confirm that authentication methods do not require users to recognize or interact with objects, images, or media.
- Verify that alternative authentication options are available and functioning correctly.
- Check that any cognitive tasks are supported by mechanisms designed to assist users.