Accessibility means creating an easy-to-use experience for everybody. At Duo, our goal is to build usable security for everyone and that means having empathy for all of our diverse end users.
Duo's authentication and enrollment interfaces are keyboard accessible using standard keystrokes, such as:
There are no Duo-specific keyboard shortcuts.
We’ve benchmarked ourselves against the international technical standard for accessibility, W3C’s Web Content Accessibility Guidelines (WCAG) 2.0. In working with the WCAG 2.0 AA standard, we also worked towards meeting the GSA Section 508 standards.
We’ve also worked together with customers in the education space who have graciously helped to audit our end user experience and have acted on their feedback. In addition, we have contracted the Michigan State University Usability/Accessibility Research and Consulting (UARC) team for a full audit later this year.
We test for accessibility in a number of ways. For our visually impaired users, we test our software manually by using both magnification and screen readers, specifically Nonvisual Access’ NVDA screen reader and Apple’s VoiceOver. We also ensure users can successfully authenticate only using a keyboard by testing font colors and backgrounds against contrast checkers and improving contrast for keyboard focus.
In order to test the results, we use Google Developer Tools’ Accessibility Audit extension to run WCAG 2.0 audit rules against our product. When these tests didn’t tell us the best route to follow, we solicited feedback from web accessibility experts from education customers.
We restructured our code to communicate the same information in multiple ways. Users need to interact with content in a variety of forms, and providing multiple ways to access content is the heart of web accessibility. We restructured HTML content to provide clear formatting information to screen readers and other assistive technology (AT). ARIA (Accessible Rich Internet Applications) roles and attributes were used to communicate additional information to AT without diminishing the experience for users.
We think that making our software more accessible improves the experience for all users. Focused content is more visible, forms have been simplified and better organized, content has been clarified, and keyboard accessibility is significantly improved.
We have focussed primarily on the end user experience; the parts of Duo’s software that are seen by the most people. The Duo Prompt has seen the most improvement as we work to make it WCAG 2.0 AA-level accessible. The Duo Mobile application has also undergone accessibility audits and improvements.
Duo's authentication prompt is fully compatible with popular screen readers and voiceover options on Apple and Android phones. It is most accessible on up-to-date version of the most popular browsers: Chrome, Safari, Firefox, and Edge. The Duo Mobile application for iOS and Android is also compatible with platform native text to speech and alternative navigation options.
We have accessibility audits scheduled with Michigan State University’s UARC team by the end of this year. We will continue to act on their feedback to meet WCAG 2.0 standards, and we will rely on our internal accessibility experts to help us design accessible software from the ground up as we continue to deliver value to our customers.
Please contact Duo Support with any questions or feedback about usability and accessibility in our products.