Operable / 2.2 Enough Time

2.2.5Re-authenticating

Level AAA

When an authenticated session expires, let users re-authenticate and continue without losing the data they had already entered. Screen reader users and people with motor disabilities often need more time to fill in forms, so a security timeout that discards their work creates a serious disadvantage.

Note

A detailed commentary for this success criterion is not yet available. In the meantime, this page lists related patterns, techniques, and links to the normative sources.

Related Techniques

Specific implementation techniques for meeting this success criterion. This site doesn't include the full text, so follow the links to the original W3C documents.

Sufficient Techniques(2)

Failures(1)

F12: Failure of Success Criterion 2.2.5 due to having a session time limit without a mechanism for saving user's input and re-establishing that information upon re-authentication(opens in a new tab)waic.jp(opens in a new tab)

Normative References

Success Criterion 2.2.5 Re-authenticating — WCAG 2.2(opens in a new tab)The normative requirement text.
Understanding Re-authenticating — W3C(opens in a new tab)Official guidance on intent, examples, and techniques.