- Success Criterion 3.3.8
- Conformance level AA
- W3C reference F109
Password Field That Blocks Pasting or Splits the Code Up
3.3.8 — Accessible Authentication (Minimum)
Scenario
Setting
A music streaming app's playlist screen
What’s wrong
The password or code field blocks pasting (or splits the code into boxes that break paste) — users are forced to memorize and retype, which is exactly what this rule forbids.
Example
A music streaming app's playlist screen shows the problem clearly: the password or code field blocks pasting (or splits the code into boxes that break paste) — users are forced to memorize and retype, which is exactly what this rule forbids.
Why it matters
People with cognitive disabilities and anyone who depends on password managers or paste. Here, on a music streaming app's playlist screen, the result is they get locked out of the account entirely.
How to test
Try to paste a password or verification code into the field: if paste is blocked, it fails.
How to fix
Allow paste and autofill in password/code fields — accept the code in one field.
Outcome
After the fix, the same visitor to a music streaming app's playlist screen can now sign in without a memory test.
Who is affected
People with cognitive disabilities and anyone who depends on password managers or paste.
Learn more
- Understanding Understanding document (opens in a new tab)
- Technique Related technique (opens in a new tab)
Related scenarios
- Password Field Scripted to Block Paste Entirely
- Password Manager Autofill Blocked by the Login Form
- Visual CAPTCHA Required With No Non-Visual Alternative
- Puzzle CAPTCHA Gating Login With No Alternative Method
- One-Time Code Split Into Boxes That Reject a Pasted Code
- Displayed Code Required to Be Retyped With Copying Disabled