- Success Criterion 3.3.8
- Conformance level AA
Password Field Scripted to Block Paste Entirely
3.3.8 — Accessible Authentication (Minimum)
Scenario
Setting
An insurance company's claims form
What’s wrong
Password fields with onpaste="return false" or JS paste blocking — memorization/transcription cognitive test with no alternative.
Example
Open an insurance company's claims form and this is what you'll see: password fields with onpaste="return false" or JS paste blocking — memorization/transcription cognitive test with no alternative.
Why it matters
People with cognitive disabilities and anyone who depends on password managers or paste. On an insurance company's claims form specifically, they can't complete sign-in without help.
How to test
Try to paste into a password field (right-click Paste or Ctrl/Cmd+V): if onpaste="return false" or similar JS blocks it, it fails.
How to fix
Login must work with paste and password managers — any cognitive test must have a non-cognitive alternative method.
Outcome
Fixed, a visitor to an insurance company's claims form can use their password manager as normal.
Who is affected
People with cognitive disabilities and anyone who depends on password managers or paste.
Learn more
- Understanding Understanding document (opens in a new tab)
Related scenarios
- Password Field That Blocks Pasting or Splits the Code Up
- Password Manager Autofill Blocked by the Login Form
- Visual CAPTCHA Required With No Non-Visual Alternative
- Puzzle CAPTCHA Gating Login With No Alternative Method
- One-Time Code Split Into Boxes That Reject a Pasted Code
- Displayed Code Required to Be Retyped With Copying Disabled