3.3.9
Accessible Authentication (Enhanced)

Enhanced Accessible Authentication

Ensure authentication processes avoid requiring users to recognize objects or media, making it easier for those with cognitive disabilities.

Acceptance Criteria

  • Authentication methods must not require users to recognize objects, images, or non-text media.

If cognitive function tests (CAPTCHA's for example) are used, they must be accompanied by:

  • Alternative Method: An alternative authentication method that does not rely on cognitive tasks.
  • Assistance Mechanism: A mechanism to assist users in completing any cognitive tasks if used.

Examples

  • Alternative Method: Provide options like biometric authentication (e.g., facial recognition, fingerprints) or passcode entry.
  • Assistance Mechanism: Offer support tools for managing passwords, such as password managers or copy-pasting features.

Exceptions

  • Cognitive Function Test: Cognitive tasks can be included if they are supported by alternative methods or mechanisms that assist users.
  • Security Necessity: If security concerns necessitate cognitive tasks, they must be paired with supportive mechanisms.

Tips

  • Ensure that no part of the authentication process relies on recognizing previously provided images or media.
  • Implement easy-to-use alternative methods such as biometric authentication to reduce cognitive load.
  • Support user-friendly tools and mechanisms that simplify the authentication process.

How to test?

  • Confirm that authentication methods do not require users to recognize or interact with objects, images, or media.
  • Verify that alternative authentication options are available and functioning correctly.
  • Check that any cognitive tasks are supported by mechanisms designed to assist users.