Password Field Scripted to Block Paste Entirely

3.3.8 — Accessible Authentication (Minimum)

Scenario

An insurance company's claims form

Password fields with onpaste="return false" or JS paste blocking — memorization/transcription cognitive test with no alternative.

<input type="password" id="claim-password" onpaste="return false" oncopy="return false">

A claimant logging in to check a pending claim can't paste their password from a manager and must recall and type it under stress.

Try to paste into a password field (right-click Paste or Ctrl/Cmd+V): if onpaste="return false" or similar JS blocks it, it fails.

Remove any onpaste or oncopy blocking code entirely. It has no security benefit and only adds a memorization requirement.

<input type="password" id="claim-password">
<!-- paste is allowed by default; nothing blocks it -->

The claimant pastes their saved password and reaches their claim status without retyping anything from memory.

People with cognitive disabilities, and anyone relying on a password manager, who lose their normal, faster way of authenticating.