3.3.9Accessible Authentication (Enhanced)
Understandable › 3.3 Input Assistance › WCAG 2.2
Overview
A cognitive function test is not required for any step in an authentication process unless that step provides at least one alternative authentication method that does not rely on a cognitive function test.
Understanding
The W3C Web Accessibility Initiative (WAI) provides detailed guidance on understanding and implementing this criterion. The Understanding document covers the intent, benefits, and supporting techniques in depth.
Read Understanding 3.3.9 on W3C WAITechniques
W3C provides documented techniques for meeting this criterion. Each technique links to the full specification with code examples and test procedures.
How to Test
Review the content or interaction for clarity and predictability.
Test with users unfamiliar with the interface to identify confusing patterns.
Verify that error messages are specific and provide guidance for correction.
Confirm that UI behavior matches user expectations based on standard patterns.
How VPATify tests this
VPATify runs automated WCAG checks against every page you scan and flags violations against individual success criteria. Our deep scan combines axe-core, contrast analysis, and structural checks to catch criterion-level failures that single-tool scans miss. See the full testing methodology and features for what's covered at each level.
Run a deep scanWant deeper accessibility insights?
Scan your entire website and generate an official VPAT document — free, in minutes.
Scan Your Site — It's Free