Best Practice 3.10 – Avoid authenticating users through cognitive tests without alternatives (Advanced level)
Ensure there is an accessible, less mental effort, and secure method for users to authenticate when logging into an account, provide at least one of the followings:
- Offer a way to use the features that does not require a cognitive assessment.
- Assistance is provided for users to pass the cognitive test.
- The cognitive test involves object recognition.
- The cognitive test checks the user's ability to identify non-text content on the mobile app.
| Example 1 | Example 2 |
|---|---|
 |
 |
| Provide an alternative authentication method that does not rely on a cognitive function test, e.g. recall password. | Provide a mechanism to assist user to complete cognitive function test, e.g. password save. |
| Example 3 | Example 4 |
 |
 |
| Provide object recognition, e.g. facial recognition | Provide personal content authentication, e.g. users are asked to select the picture during login, which is uploaded as part of account creation |
W3C WCAG Reference: 3.3.8 Accessible Authentication (minimum)
