Understandable / 3.3 Input Assistance
3.3.9Accessible Authentication (Enhanced)
Level AAANew in 2.2No step of an authentication process may require a cognitive function test -- memorization, calculation, or puzzle-solving. Unlike 3.3.8, this Enhanced level does not even allow the object-recognition CAPTCHA or personal-content exceptions. In practice, meeting this criterion means offering a genuinely cognition-free alternative, such as a passkey or biometric login.
New success criterion added in WCAG 2.2
This criterion was introduced in WCAG 2.2 and was not part of WCAG 2.1. Refer to the links below for detailed guidance.
Note
A detailed commentary for this success criterion is not yet available. In the meantime, this page lists related patterns, techniques, and links to the normative sources.
Related Techniques
Specific implementation techniques for meeting this success criterion. This site doesn't include the full text, so follow the links to the original W3C documents.
Sufficient Techniques(2)
Normative References
- Success Criterion 3.3.9 Accessible Authentication (Enhanced) — WCAG 2.2(opens in a new tab)The normative requirement text.
- Understanding Accessible Authentication (Enhanced) — W3C(opens in a new tab)Official guidance on intent, examples, and techniques.