Accessible Authentication (Minimum)
A cognitive function test (such as remembering a password or solving a puzzle) is not required for any step in an authentication process unless that step provides at least one alternative that does not rely on a cognitive function test, a mechanism to assist the user in completing the test, a way to recognize objects, or a way to identify personal content.
In plain language
Logging in can't depend solely on someone "memorizing and typing from memory" a password or solving a mental challenge — the site needs to allow pasting a password, using a password manager, or offer some other alternative way to sign in.
Why it matters
Memorizing passwords and solving tests (like typing a code you can't paste) is hard for people with cognitive, memory, or attention difficulties. Blocking features like pasting a password or auto-fill forces everyone to memorize information, which shuts out people who rely on these tools to access their own accounts.
In practice
Fails this criterion
A login form blocks pasting into the password field and doesn't allow password managers to auto-fill it, forcing the person to type everything manually from memory.
Meets this criterion
The password field accepts pasting (Ctrl+V) and works normally with password managers and browser auto-fill. Or the site offers biometric login (fingerprint, face recognition) as an alternative.
Test it yourself
Try pasting your password into the login field (Ctrl+V) and see if it works. Also test whether a password manager can auto-fill the field. If none of that works and there's no other way to sign in, this criterion is failing.