[#48395] - Install Joomla: Password requirements are not associated with the password fields
- New
- Medium
- Build: 5.4-dev
- # 48395
Steps to reproduce the issue
NOTE: Accessibility backlog issue and work-in-progress. This issue has been opened to account for all the issues flagged in the initial Milestone 1a Audit Report. If this is a duplicate issue, it will be closed by the end of September 2026.
| Milestone 1a finding ID | M1a-042 |
|---|---|
| Backlog priority | High |
| Severity — carried from Milestone 1a | Serious |
| Implementation effort | Medium |
| Target milestone(s) | MS2b, MS3b, MS5a, MS5b, MS8a, MS10 |
| WCAG 2.2 success criterion | 1.3.1 Info and Relationships; 1.3.2 Meaningful Sequence; 3.3.1 Error Identification; 3.3.2 Labels or Instructions; 3.3.4 Error Prevention (Legal, Financial, Data) |
| Responsibility tag(s) from report | Development |
| Affected Joomla area/component | https://accessibility-project.joomla.org/results/Milestone-1a/milestone1/deliverable1/wcag-report#4ed1710d-82fb-4529-97a5-26575050bc5a |
| Affected user journey(s) | 13 – Install Joomla |
| Source report/reference | Milestone 1a WCAG audit report |
| STF reporting reference | To be assigned |
| Issue owner | To be assigned |
| Status | Triage |
Audit finding
Password requirements are not associated with the password fields
User impact
The issue creates an accessibility barrier in the affected component as users will not know what is required of their poassword.
Remediation plan
Add the missing text alternative, accessible description, or contextual relationship in markup so the information is exposed clearly to assistive technologies.
Steps to reproduce
- Open the Joomla installation form.
- Locate the password fields and visible requirements.
- Inspect labels, DOM order, and aria-describedby relationships.
- Focus each field with a screen reader.
- Submit an invalid password.
- Observe that requirements or field-specific errors are not announced.
Version
6.1
Expected result
Requirements of password are conveyed to assistive technology during the password creation or entering process.
Actual result
The only error information a screen reader or assistive technology user would get its that “This value is not valid” as long as the password is less than 12 characters long. That there is a 12 character requirement is not conveyed to assistive technology users as they enter the password. There is an element that only announces “Password doesn’t meet the site’s requirements.” when an insufficient password is read.
What device were you using? (eg, phone, laptop)
Desktop web
What web browser were you using? (eg, Chrome, Safari)
Chrome, Firefox, Edge, Safari
Assistive Technology?
VoiceOver, JAWS, NVDA
Additional Comments
No response
| Labels |
Added:
a11y
a11y-audit-backlog
a11y-priority-serious (High)
|
||
joomla-cms-bot
- | Labels |
Added:
No Code Attached Yet
|
||
| Title |
|
||||||