Success criterion 2.2.5 · Level AAA
Re-authenticating
“If you log me out every 5 minutes, I swear I'll start writing my passwords on sticky notes!”
Success criterion 2.2.5 · Level AAA
Re-authenticating
When an authenticated session expires, the user can continue the activity without loss of data after re-authenticating.
Principle 2: Operable · Guideline 2.2: Enough Time
What each role can do
- Product manager
- Ensure session timeouts provide a seamless way to re-authenticate without data loss.
- Designer
- Design user-friendly re-authentication processes that retain the user’s previous state.
- Developer
- Implement session management that allows for easy re-authentication without loss of data.
- Tester
- Test to make sure that re-authenticating does not result in the loss of user data or state.
Once it is fixed
“Thank you for saving my work and my sanity. No more password post-its!”
Next criterion: 2.2.6 Timeouts