Scanning pages behind a login

AccessibilityBrief can sign in with a test account and scan pages that visitors only see after logging in. It signs in once per scan, on your own site, and never opens sign-out or delete links.

Before you start

• Use a dedicated test account that can only read. Never an administrator.
• The site must be verified, and the login page must be on the site's own address. Sign-in through another service (single sign-on) is not supported.
• The password is stored encrypted and never shown again. The session exists only while the scan runs.
• Scans behind a login keep no screenshots. Reports can still show text and HTML from private pages, so think before sharing one.

Set it up

1. In the site's settings, open Scan pages behind a login and turn it on.
2. Enter the login page address, the test account's user name or email, and its password.
3. Press Test login. The result shows whether sign-in worked and where it ended. You can test at most 5 times an hour.
4. If the form is unusual, fill in the optional selectors: user name field, password field, sign-in button, and an element or address that only appears once signed in.

If sign-in fails during a scheduled scan, scheduled scans of that site pause until a test succeeds, so a wrong password is not tried again and again.