• Success Criterion 3.3.8
  • Conformance level AA

Login PIN Entered Only via a Randomized On-Screen Keypad

3.3.8 — Accessible Authentication (Minimum)

Scenario

Setting

A streaming music app's search results

What’s wrong

Log-in flows requiring memorized PIN entry on a randomized on-screen keypad (blocks assistive entry) with no alternative method.

Example

Here's a real case from a streaming music app's search results: log-in flows requiring memorized PIN entry on a randomized on-screen keypad (blocks assistive entry) with no alternative method.

Why it matters

People with cognitive disabilities and anyone who depends on password managers or paste. In this case (a streaming music app's search results), they get locked out of the account entirely.

How to test

Try to complete a login requiring a memorized PIN entered via a randomized on-screen keypad: if this blocks assistive input methods with no alternative, it fails.

How to fix

Login must work with paste and password managers — any cognitive test must have a non-cognitive alternative method.

Outcome

Once corrected, a streaming music app's search results lets them complete authentication without getting stuck.

Who is affected

People with cognitive disabilities and anyone who depends on password managers or paste.

Learn more