F109: Failure of Success Criterion 3.3.8 and 3.3.9 due to preventing password or code re-entry in the same format

Corpus WCAG 2.2Applies to WCAG 2.2Level AA, AAAAutomatable: partial

Summary: preventing password or code re-entry in the same format

Why it fails: This page reproduces the F109 failure pattern so auditors can verify detection against 3.3.8, 3.3.9.


Failure technique

Understanding

Quickref

Try pasting into Confirm password — paste is blocked so codes cannot be re-entered in the same format.

Intentional failure — audit this region

F109

Paste is disabled — you must re-type the password manually.

<form>
  <label for="f109-pw">Password</label>
  <input type="password" id="f109-pw" name="password" autocomplete="new-password">
  <label for="f109-confirm">Confirm password</label>
  <input type="password" id="f109-confirm" name="confirm" autocomplete="new-password">
  <p class="f109-note">Paste is disabled — you must re-type the password manually.</p>
  <button type="submit">Create account</button>
</form>
Expected audit result

Manual check: Confirm the specimen demonstrates the documented F109 failure in isolation.