User Experience Stack Exchange is a question and answer site for user experience researchers and experts. It only takes a minute to sign up.
Sign up to join this community
I'm working on the login and login creation of a secured website.
It's the kind of login where a keypad is displayed, all the numbers are in a random order and you need to click on them.
(ugly) example :
My question is : Is there a way of making this accessible? Or should there be an accessible mode where users can type their pin code using their keyboard's numbers?
From an accessibility point of view, the randomised grid of numbers is likely to be a significant barrier for several groups of users, particularly those using screen readers and braille displays, and those with cognitive disabilities.
For those using a screen reader or braille display, the first challenge woudld be communicating what they need to do. However, the process of actually navigating forward and backward through that grid to find and select the right numbers in the right order, remembering what you've selected so far, sounds like quite a challenge.
Similarly, for those with cognitive disabilities, explaining the concept and the instructions, and then providing positive and negative feeback while they attempt the task, might be difficult.
In short, it would be wise to provide an easier alternative. But of course if you are able to provide an easier alternative, why have the complicated version at all?
Do not prevent users from using the keyboard.
The most obvious reason being accessibility: keyboard-only users will not just have a tough time logging in, they will not be able to at all.
I myself have difficulty with fine-motor coordination, and Fitts's Law is a serious consideration for me. I would find it very difficult to use this, even though I am capable of and do use a mouse.
This shouldn't be a "mode", this should just be the default: this doesn't make login more secure if the input device is a mouse. It only makes it more secure if the input mode is a touch device that leaves fingerprint. That is the purpose behind randomizing the location of the inputs: an attacker can't take your phone/keypad and figure out that your code must be 1 2 3 4 because there are lots of fingerprint smears where those numbers are, or the numbers on a physical keyboad are worn.
Otherwise, it's misguided security theatre and puts up another barrier for absolutely no reason.
Applying the same logic to an alpha-numeric keyboard, one could require that users use an on-screen keyboard to enter their password and randomize the position of the letters every time. What would that do? Only cause a huge spike in account locks and password resets.
