[{"data":1,"prerenderedAt":122},["ShallowReactive",2],{"glossary:accessible-authentication":3},{"slug":4,"term":5,"title":6,"description":9,"keywords":12,"updatedAt":15,"tldr":16,"sections":25,"faqs":70,"relatedPages":85,"references":113},"accessible-authentication","Accessible Authentication",{"zh-Hant-TW":7,"en":8},"什麼是可及的身份驗證？","What Is Accessible Authentication?",{"zh-Hant-TW":10,"en":11},"可及的身份驗證要求登入、驗證與找回帳號流程不要只依賴記憶、辨識圖像、複雜解謎或難以操作的步驟。它是 WCAG 2.2 中與真實使用任務高度相關的成功準則。","Accessible authentication means login, verification, and account recovery should not rely only on memory, image recognition, complex puzzles, or difficult interaction steps. It is one of the WCAG 2.2 success criteria most directly tied to real user tasks.",{"zh-Hant-TW":13,"en":14},"可及的身份驗證, accessible authentication, WCAG 2.2 3.3.8, 登入無障礙, 驗證碼無障礙","accessible authentication, WCAG 2.2 3.3.8, accessible login, CAPTCHA accessibility, authentication accessibility","2026-06-30",{"zh-Hant-TW":17,"en":21},[18,19,20],"可及的身份驗證關注使用者能不能順利登入、驗證身分與找回帳號。","流程不應只依賴記憶測驗、辨識圖片、複雜驗證碼或難以操作的任務。","比較好的做法是支援密碼管理器、一次性代碼、複製貼上、替代驗證方式與清楚錯誤提示。",[22,23,24],"Accessible authentication focuses on whether people can log in, verify identity, and recover accounts.","Flows should not rely only on memory tests, image recognition, complex CAPTCHAs, or difficult interaction tasks.","Better patterns support password managers, one-time codes, copy and paste, alternative verification methods, and clear errors.",[26,37,59],{"title":27,"body":30},{"zh-Hant-TW":28,"en":29},"為什麼登入流程特別重要？","Why login flows matter",{"zh-Hant-TW":31,"en":34},[32,33],"很多服務真正重要的功能都在登入後。即使首頁、內容頁與商品頁都做得很好，如果登入、雙因素驗證或找回帳號流程讓人卡住，使用者仍然無法完成任務。","這類問題常影響視覺、認知、記憶、手部操作或使用輔助科技的人，也會影響臨時受傷、使用行動裝置或處在壓力情境中的一般使用者。",[35,36],"Many important services sit behind login. Even if public pages are accessible, people still cannot complete the task if login, two-factor authentication, or account recovery blocks them.","These barriers affect people with visual, cognitive, memory, motor, or assistive technology needs. They can also affect anyone using a mobile device, recovering from injury, or acting under pressure.",{"title":38,"body":41,"items":46},{"zh-Hant-TW":39,"en":40},"常見風險","Common risks",{"zh-Hant-TW":42,"en":44},[43],"可及的身份驗證不是要求網站取消安全機制，而是避免安全流程只剩一種很難使用的方式。",[45],"Accessible authentication does not mean removing security. It means avoiding security flows that only offer one difficult path.",{"zh-Hant-TW":47,"en":53},[48,49,50,51,52],"只能靠辨識圖片或扭曲文字通過驗證。","不允許密碼管理器、複製貼上或一次性代碼自動填入。","要求使用者記住複雜資訊，卻沒有可用的替代方式。","驗證錯誤訊息不清楚，使用者不知道下一步。","逾時過短，或重新驗證後遺失已輸入資料。",[54,55,56,57,58],"Only image or distorted-text recognition can pass verification.","Password managers, copy and paste, or one-time-code autofill are blocked.","Users must remember complex information without a usable alternative.","Verification errors are unclear and do not explain what to do next.","Timeouts are too short, or entered data is lost after reauthentication.",{"title":60,"body":63},{"zh-Hant-TW":61,"en":62},"團隊可以先檢查什麼？","What teams can check first",{"zh-Hant-TW":64,"en":67},[65,66],"先用真實任務走過登入、註冊、雙因素驗證、忘記密碼與帳號恢復流程。確認鍵盤能操作、錯誤提示清楚、驗證碼有替代方式、密碼管理器可用。","DevCheck 可以協助做頁面層級的初步掃描與情境模擬，但登入流程是否真的可完成，仍需要人工操作與實際測試。",[68,69],"Start by walking through login, registration, two-factor verification, password reset, and account recovery. Check keyboard operation, clear errors, CAPTCHA alternatives, and password-manager compatibility.","DevCheck can help with page-level scans and simulations, but whether the authentication task can actually be completed still needs manual operation and real testing.",[71,78],{"question":72,"answer":75},{"zh-Hant-TW":73,"en":74},"可及的身份驗證代表不能用驗證碼嗎？","Does accessible authentication mean CAPTCHAs are forbidden?",{"zh-Hant-TW":76,"en":77},"不是。重點是不能只有一種會阻擋使用者的驗證方式。若使用驗證碼，應提供可用替代方案並避免造成不必要的操作門檻。","No. The key is not to make one blocking method the only path. If CAPTCHAs are used, provide usable alternatives and avoid unnecessary interaction barriers.",{"question":79,"answer":82},{"zh-Hant-TW":80,"en":81},"這是 WCAG 2.2 的新要求嗎？","Is this a WCAG 2.2 requirement?",{"zh-Hant-TW":83,"en":84},"是。WCAG 2.2 新增與身份驗證相關的成功準則，提醒團隊不要讓登入與驗證流程只依賴認知測驗或難以操作的任務。","Yes. WCAG 2.2 adds success criteria related to authentication, reminding teams not to make login and verification rely only on cognitive tests or difficult tasks.",[86,93,98,103,108],{"label":87,"path":89,"description":90},{"zh-Hant-TW":88,"en":88},"Accesserty DevCheck","\u002Fdevcheck",{"zh-Hant-TW":91,"en":92},"用瀏覽器內工具檢查網站無障礙、WCAG、ARIA、鍵盤操作、焦點路徑、AI 語意與 PDF 結構訊號。","Run browser-based checks for web accessibility, WCAG, ARIA, keyboard access, focus paths, AI semantic review, and PDF structure signals.",{"label":94,"path":97},{"zh-Hant-TW":95,"en":96},"WCAG 術語頁","WCAG glossary page","\u002Fglossary\u002Fwcag",{"label":99,"path":102},{"zh-Hant-TW":100,"en":101},"網站上線前無障礙檢測指南","Accessibility testing before launch guide","\u002Fguides\u002Faccessibility-testing-before-launch",{"label":104,"path":107},{"zh-Hant-TW":105,"en":106},"WCAG 檢測清單","WCAG testing checklist","\u002Fguides\u002Fwcag-testing-checklist",{"label":109,"path":112},{"zh-Hant-TW":110,"en":111},"WCAG 檢測工具","WCAG compliance tool","\u002Fwcag-compliance-tool",[114,118],{"label":115,"path":117},{"zh-Hant-TW":116,"en":116},"W3C WCAG 2.2 - Accessible Authentication (Minimum)","https:\u002F\u002Fwww.w3.org\u002FTR\u002FWCAG22\u002F#accessible-authentication-minimum",{"label":119,"path":121},{"zh-Hant-TW":120,"en":120},"W3C Understanding Accessible Authentication","https:\u002F\u002Fwww.w3.org\u002FWAI\u002FWCAG22\u002FUnderstanding\u002Faccessible-authentication-minimum.html",1789828082047]