• Success Criterion 3.3.8
  • Conformance level AA

Visual CAPTCHA Required With No Non-Visual Alternative

3.3.8 — Accessible Authentication (Minimum)

Scenario

Setting

A food-delivery app's order-tracking screen

What’s wrong

Visual CAPTCHAs (distorted text) required with no object-recognition-exempt alternative or non-cognitive alternative path.

Example 

<img src="captcha-distorted.png" alt="">
<input id="captcha-response">
<!-- logging in to check order status requires reading distorted text with no audio or object-based alternative -->

Why it matters

A blind customer trying to check whether dinner is on the way can't read the distorted letters and has no other way to log in.

How to test

Attempt to log in: if a distorted-text visual CAPTCHA is required with no alternative (audio, non-cognitive method), it fails.

How to fix

Accessible authentication does not require a CAPTCHA at login at all. Use a non-cognitive method like a one-time code sent by text.

<!-- CAPTCHA replaced entirely with an accessible authentication flow -->
<label for="otp">Enter the 6-digit code sent to your phone</label>
<input id="otp" autocomplete="one-time-code">

Outcome

The customer logs in with a text code and confirms the delivery is on schedule.

Who is affected

Blind and low-vision users, and people with dyslexia, who cannot read a visual distortion CAPTCHA and have no equivalent alternative.

Learn more

Related scenarios