w3.org
Provide a Login that Does Not Rely on Memory or Other Cognitive Skills
User Need I need to be able to use a site without remembering or transcribing passwords and usernames. What to Do Users can login, register, and reset credentials, without having more cognitive abilities then they need to use a simple web page. They do not have to: memorize character strings, perform calculations, copy content, answer puzzles, reliably reproduce gestures, or recognize characters presented on screen, and then enter them into an input field. How it Helps People with memory impairments often forget their passwords and are not able to login. Their solutions often are only sometimes helpful and have security risks: They may have to look at or listen to text several times to copy or type it into a form field. They may reuse a single password or use a simple-to-remember password, which they can remember. If they need to change their password or use a complicated password they may store passwords insecurely, such as written on pieces of paper which other people can see. They may also struggle with other steps during login, such as: entering characters in the correct order, entering characters correctly with a limited number of tries (resulting in being locked out), finding a PIN, working out puzzles or distorted letters,
