- Success Criterion 3.3.8
- Conformance level AA
One-Time Code Split Into Boxes That Reject a Pasted Code
3.3.8 — Accessible Authentication (Minimum)
Scenario
Setting
A photo-sharing app's upload screen
What’s wrong
one-time password (OTP) split into 6 single-character inputs that reject paste of the full code.
Example
A QA pass on a photo-sharing app's upload screen turns this up: one-time password (OTP) split into 6 single-character inputs that reject paste of the full code.
Why it matters
People with cognitive disabilities and anyone who depends on password managers or paste. On a photo-sharing app's upload screen, that means they can't complete sign-in without help.
How to test
Copy a one-time code and try to paste it into a split multi-box OTP input: if pasting the full code doesn't work and each box must be typed individually, it fails.
How to fix
Login must work with paste and password managers — any cognitive test must have a non-cognitive alternative method.
Outcome
With the fix in place on a photo-sharing app's upload screen, they complete authentication without getting stuck.
Who is affected
People with cognitive disabilities and anyone who depends on password managers or paste.
Learn more
- Understanding Understanding document (opens in a new tab)
Related scenarios
- Password Field That Blocks Pasting or Splits the Code Up
- Password Field Scripted to Block Paste Entirely
- Password Manager Autofill Blocked by the Login Form
- Visual CAPTCHA Required With No Non-Visual Alternative
- Puzzle CAPTCHA Gating Login With No Alternative Method
- Displayed Code Required to Be Retyped With Copying Disabled