What this criterion requires
The AAA tier of 3.3.8: no cognitive function test at all, without the object-recognition exceptions.
Who it helps
People with cognitive disabilities.
Example: fails vs passes
Login gated by an image-recognition CAPTCHA, on a AAA claim.
Passkeys, magic links or federated sign-in with no cognitive test at all.
AAA removes even the object-recognition exceptions of 3.3.8.
How to meet and fix it
- Passkeys, magic links or federated login as full alternatives
Common failures auditors find
- Any CAPTCHA-gated authentication at AAA
Automated scanning catches a share of these instantly - run a free check - and a manual audit covers the judgement calls a tool cannot make.
Sources
- W3C, Understanding 3.3.9: Accessible Authentication (Enhanced) - w3.org/WAI
- W3C, How to Meet 3.3.9 (quick reference) - w3.org/WAI/quickref
Last updated . Reviewed by the EqualWeb accessibility team.
Does your site pass 3.3.9?
Run a free automated check now, or have certified IAAP/CPWA auditors test every criterion and document the result.