diff --git a/techniques/failures/F109.html b/techniques/failures/F109.html
new file mode 100644
index 0000000000..7760f88468
--- /dev/null
+++ b/techniques/failures/F109.html
@@ -0,0 +1,33 @@
+
+
+ Failure of Success Criterion 3.3.8 and 3.3.9 due to forcing transcription of individual password characters
+
+
Failure of Success Criterion 3.3.8 and 3.3.9 due to forcing transcription of individual passphrase characters
ID: F109
Technology: failures
Type: Failure
When to Use
+
All technologies that require authentication.
+
Description
+
Requiring users to authenticate by entering a password or passcode in a different format from which it was originally created is a failure to meet Success Criteria 3.3.8 and 3.3.9 (unless alternative authenticaton methods are available). If a user is required to enter individual password characters across multiple fields, in a way that prevents pasting the password in a single action, it prevents use of a password manager or pasting from local copy of the password or passcode. This means users cannot avoid transcription, resulting in a cognitive function test. This applies irrespective of whether users are required to enter all characters in the string, or just a subset.
+
+
+
Examples
+
These examples would prevent a user from entering a password in the same format in which the password was originally created:
+
+
A fieldset that prompts a user to "Enter the 2nd, 6th and last characters of your password", with separate input fields for each character.
+
A fieldset that prompts a user to enter each digit of a passcode in a separate input (unless the user can paste the entire passcode in the first input, and the remaining inputs are populated automatically).
+
A password input fieldset composed of <select> elements that requires a user to select each character of a fixed-length password from individual dropdown fields.
+
+
+
+
Tests
+
Procedure
+
+
Check if the structure of the input field(s) prevents the user from pasting or auto-filling the entire password or passcode in the format in which it was originally created.
+
Confirm that no other acceptable authentication methods are present that satisfy Success Criteria 3.3.8 or 3.3.9 (such as an authentication method that does not rely on a cognitive function test).
+
+
+
Expected Results
+
+
If steps #1 and #2 are true, then this failure condition applies and content fails the Success Criterion.