WCAG 2.1 · Level A · Operable

WCAG 2.2.1 — Timing Adjustable, explained with examples

For each time limit set by the content, the user must be able to turn it off, adjust it, or extend it. Banking and government forms commonly time out aggressively. Without warning and a way to extend, users with cognitive disabilities or motor impairments lose work.

Number
2.2.1
Level
A
Principle
Operable
Guideline
2.2 Enough Time

Why this criterion exists

Banking and government forms commonly time out aggressively. Without warning and a way to extend, users with cognitive disabilities or motor impairments lose work.

If you only remember one thing: for each time limit set by the content, the user must be able to turn it off, adjust it, or extend it. Everything else on this page is detail.

Who feels it when this fails

Accessibility criteria sometimes feel abstract until you see who pays the cost when a site ignores them. Timing Adjustable affects:

  • Cognitive accessibility

  • Motor accessibility

  • Older users

How sites typically fail it

These are the patterns we see week after week. None are intentional — they are accidents of how teams build interfaces under deadline. Knowing the failure modes is the fastest path to writing them out of your component library.

  • Banking sessions timing out at 5 minutes with no warning

How to test for it

  • Trigger every time limit; verify warning + extension or off-switch.

Automated scanners catch this criterion most of the time, but never all of the time. Manual testing with the keyboard and a screen reader closes the gap.

A code fix you can copy

Always warn before timeout and provide an extension button.

The problem

JavaScript
setTimeout(() => location.href = '/logout', 300000);

The fix

JavaScript
// At t=4 min: warn user with countdown; offer "Stay signed in"
// At t=5 min: log out only if no extension requested.

Always warn before timeout and provide an extension button.

Other Operable criteria

Find every accessibility issue on your site in 60 seconds.

Free public scan. No card. AI-generated fixes for every issue we find.