Password input - Web accessibility testing checklist - [Updated 2025] Atomic Accessibility

How to test a password input

Gherkin Checklist

Given that I am on a screen with a password input

1 Keyboard only

WHEN I use the tab key to move focus to the password input I SEE focus is strongly visually indicated
Then when I use the tab key to move focus to the show/hide password feature I SEE its name, role and state
Then when I use the show/hide password feature I SEE the state of the password visibility (with or without characters entered)

2 Desktop screenreader

WHEN I use a desktop screenreader (NVDA, JAWS, VoiceOver) AND I use the tab key to move focus to the password input
- I HEAR Its purpose is clear
- I HEAR It identifies itself as a text input
- I HEAR Hints or errors are read after the label (Ex: Password formatting)
- I HEAR It expresses if the password is being shown and if applicable: required, disabled / dimmed / unavailable
Then when I use the tab key to move focus to the show/hide password feature I HEAR its name, role and state
Then when I use the show/hide password feature I HEAR the state of the password visibility (with or without characters entered)

3 Mobile screenreader

WHEN I use a screenreader AND I swipe to focus on a password input
- I HEAR Its purpose is clear
- I HEAR It identifies itself as a text input
- I HEAR Hints or errors are read after the label (Ex: Password formatting)
- I HEAR It expresses if the password is being shown and if applicable: required, disabled / dimmed / unavailable

1 Keyboard & screen reader actions

When I use	I see/hear
Tab	Focus moves visibly to the input or show password checkbox
Spacebar	Toggles the show password checkbox

2 Mobile screenreader gestures

When I use	I hear
Swipe	Focus moves to the input
Keyboard	Keyboard appears

3 Screenreader output

Reads	I hear
Name	Its purpose is clear
Role	It identifies itself as a text input
Group	Hints or errors are read after the label (ex: password formatting)
State	It expresses if the password is being shown and if applicable: required, disabled / dimmed / unavailable

A password input must meet WCAG principles:

1 Perceivable

Is easy to identify as interactive
Color is not used as the only means of conveying information

2 Operable

Is keyboard operable
The click/tap target area is no smaller than 44x44px
The disabled and focus states have a 3:1 minimum contrast ratio against default
The focus indication has a 3:1 minimum contrast ratio against adjacent elements
The focus indication has a minimum area equal to the width of the element and 2px in height

3 Understandable

Its purpose is clear in the context of the whole page

4 Robust

Conveys the correct semantic role
Expresses its state
Meets criteria across platforms, devices and viewports

Code examples

Use semantic HTML

This semantic HTML contains all accessibility features by default.
Placing the show password checkbox ahead of the password input increases discoverability for screen reader users.
- CSS pseudo elements are used in the checkbox label to express its state on focus of the password input.

<form class="password-container">
  <label for="password">
    Password
    <span class="helper" aria-hidden="true">
      Required
    </span>
  </label>

  <div id="password-toggle" class="password-toggle">
    <input type="checkbox" id="show-password">
    <label for="show-password">
      Show Password
    </label>
  </div>

  <div id="password-description" class="description">
    Use any length of characters including emojis.
  </div>

  <input type="password"
         id="password"
         aria-describedby="password-toggle password-description"
         aria-required="true"
         required>
</form>

Related password input entries

Web demo: Password input

Web Password input

How to test a password input

1 Keyboard only

2 Desktop screenreader

3 Mobile screenreader

1 Keyboard & screen reader actions

2 Mobile screenreader gestures

3 Screenreader output

1 Perceivable

2 Operable

3 Understandable

4 Robust

Code examples

Use semantic HTML

Related password input entries