People with disabilities face an increased risk of being a victim of cybercrime due to the lack of tool accessibility and giving up their privacy by having a third party assist them with tasks. Barriers can be defined as permanent (physical disability), temporary (surgery related) or situational (noisy work environment). Below are suggestions on how to create cybersecurity solutions for users with disabilities.
Design Accessible Interactions
- Have multiple input methods
- Voice, keyboard, touch, etc.
- Prioritize Usability
- Offer alternatives or extend timers to make time-sensitive methods accessible
- Respect User Behavior
- Don’t block users for unusual interactions. Security is for everyone.
Make Your Content Inclusive
- Make security tools usable for all
- Follow WCAG guidelines to ensure everyone can use your tools
- Clear error messages
- Use plain language, not jargon
- Describe visual content
- Use Alt text for images, explain icons, and provide text labels for color-coded information.
Below is one example of what can be implemented for MFA to ensure cybersecurity for a person with a vision disability.
- Use a voice authentication tool to start the process. The user ensures they are in a secure place to interact with the tool.
- The system will authenticate based on their voice and a code will display on the screen. The user has a screen reader to read the code.
- The user enters the code on their phone using assistive technology.
This process will take longer than traditional methods, so it is important to implement user-customizable timeouts.
When providing data in color coded worksheets, consider creating a column for each color for users that are color blind. Use patterns or shapes to supplement conveying information.
Encourage a discussion with people that have accessibility requirements to provide ongoing feedback and be flexible on the measures you put in place.
Web Accessibility and Security
Balancing Accessibility, Security, and AI: Design Inclusive Security Tools