WCAG 3.3.9: Accessible Authentication (Enhanced)
WCAG 3.3.9 Accessible Authentication (Enhanced) is a level AAA success criterion from WCAG 2.2. The enhanced level does not allow a cognitive test at all for authentication, even with a paste alternative, unless a non-cognitive path exists.
People who cannot complete memory or transcription tests need a path that does not ask for them.
How to test
Confirm login can be done with a method that is not a memory test, such as a device prompt or an email link, without requiring a password.
How to fix
Offer a passwordless path.
Example that fails
The only login is a password the person must remember.
Example that passes the check
An emailed one-time link signs the person in.
Shopify
Offer customer accounts with an email code if you enable that Shopify option, and do not remove it.
WooCommerce
Add an email-link login plugin path alongside passwords.
WordPress
Offer a magic-link login.
Wix
Use a member login that can email a link.