Authentication · Composite use case

Offer more than one way through.

The sign-up form keeps challenge controls understandable while making email verification a first-class alternative.

Builds on: sign-up fields, numeric CAPTCHA controls, challenge limitations, and status messages.

Interactive flow

Create account

The CAPTCHA route is available for study, but email verification bypasses the cognitive task instead of merely changing its sensory format.

Teaching simulation: client-side CAPTCHA and submission code are not security controls.

Use at least eight characters. Paste and password-manager suggestions are supported.

Numeric security challenge

Required when using the challenge route.

Test contract

Know the order and feedback.

Documenting the interaction before implementation makes regressions visible during keyboard and screen-reader testing.

Challenge keyboard order

  1. Email address
  2. Create password
  3. Reload challenge
  4. Speak challenge
  5. Enter the five numbers
  6. Use email verification instead
  7. Create account

Announcements and focus

  • Reload keeps focus and announces “New challenge loaded.”
  • Speech starts only when requested.
  • Choosing email hides challenge controls and moves focus to the alternative heading.
  • Validation moves focus to an error summary; completion uses a persistent status region.