- Success Criterion 3.3.8
- Conformance level AA
Email Magic-Link Login That’s Broken or Expires Instantly
3.3.8 — Accessible Authentication (Minimum)
Scenario
Setting
A hotel booking site's room-selection page
What’s wrong
Email magic-link offered but broken/expired instantly, leaving cognitive-test path as the only working method.
Example
On a hotel booking site's room-selection page: email magic-link offered but broken/expired instantly, leaving cognitive-test path as the only working method.
Why it matters
People with cognitive disabilities and anyone who depends on password managers or paste. The practical effect on a hotel booking site's room-selection page: they can't complete sign-in without help.
How to test
Try the email magic-link login alternative: if it's broken or expires almost instantly, leaving the cognitive-test method as the only working path, it fails.
How to fix
Login must work with paste and password managers — any cognitive test must have a non-cognitive alternative method.
Outcome
That one change on a hotel booking site's room-selection page means they sign in without a memory test.
Who is affected
People with cognitive disabilities and anyone who depends on password managers or paste.
Learn more
- Understanding Understanding document (opens in a new tab)
Related scenarios
- Password Field That Blocks Pasting or Splits the Code Up
- Password Field Scripted to Block Paste Entirely
- Password Manager Autofill Blocked by the Login Form
- Visual CAPTCHA Required With No Non-Visual Alternative
- Puzzle CAPTCHA Gating Login With No Alternative Method
- One-Time Code Split Into Boxes That Reject a Pasted Code