---
title: "Make signing in easy for everyone · Agent Wranglers"
url: https://agentwranglers.se/playbook/website/accessibility/accessible-authentication
updated: 2026-10-20
licence: "All rights reserved"
---

# Make signing in easy for everyone

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

- Level: Required
- Chapter: [Accessibility](https://agentwranglers.se/playbook/website/accessibility)
- Rule: Never make any sign-in step depend only on remembering, transcribing or solving a puzzle. Allow paste and password managers. This is WCAG 2.2 criterion 3.3.8 (AA).
- How: Allow paste in every field, including one-time codes. Use the right `autocomplete` tokens so password managers fill in. Offer passkeys or email links. A puzzle that asks people to recognise objects is allowed at AA, but offer another way too.
- Check: A browser test pastes into the username, password and code fields, and each value arrives. Every field has an `autocomplete` token.

Example:

```html
<!-- No onpaste blocking. The autocomplete tokens let password managers fill in. -->
<input id="user" type="email" autocomplete="username webauthn">
<input id="pass" type="password" autocomplete="current-password">
<input id="code" inputmode="numeric" autocomplete="one-time-code">
```

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers website playbook: https://agentwranglers.se/playbook/website/accessibility/accessible-authentication`.

- Previous: [Announce changes without moving focus](https://agentwranglers.se/playbook/website/accessibility/status-messages)
- Next: [Never ask for the same thing twice](https://agentwranglers.se/playbook/website/accessibility/redundant-entry)
- [Accessibility](https://agentwranglers.se/playbook/website/accessibility)