Login CAPTCHA lacks accessible alternative (WCAG 2.2 SC 3.3.8)
This check looks at your login form for a CAPTCHA, the "prove you're not a robot" test, and whether it offers any accessible alternative alongside it, such as a passkey, a magic email link, or signing in with Google, Apple, or Microsoft. This site's login form has a CAPTCHA but no such alternative. This fails WCAG 2.2 Success Criterion 3.3.8, Accessible Authentication, which is mandatory under the European Accessibility Act from June 2025 and also creates direct exposure to lawsuits under the US Americans with Disabilities Act, since CAPTCHAs can be a genuine barrier for visitors with certain disabilities. Your developer should add at least one CAPTCHA-free way to sign in, such as a passkey, a device-based login method also called WebAuthn, a magic email link, or a "Sign in with Google/Apple/Microsoft" option. Budget around four hours, since this touches the authentication flow.
Why this matters
This fails WCAG 2.2 Success Criterion 3.3.8, Accessible Authentication, which is mandatory under the European Accessibility Act from June 2025 and also creates direct exposure to lawsuits under the US Americans with Disabilities Act, since CAPTCHAs can be a genuine barrier for visitors with certain disabilities.
How to fix it
Your developer should add at least one CAPTCHA-free way to sign in, such as a passkey, a device-based login method also called WebAuthn, a magic email link, or a "Sign in with Google/Apple/Microsoft" option. Budget around four hours, since this touches the authentication flow.