Accessibility Statement

Last updated: August 14, 2026

Our Commitment

Just For Phishing should be usable by everyone who needs the training, including people who navigate by keyboard, use a screen reader, or need reduced motion. This page describes what the site does today and what it does not yet do — it is a status report, not a marketing claim.

What works today

⌨️ Keyboard Navigation

Every page starts with a skip link. Quiz answers are real buttons you can reach with Tab and choose with Enter or Space.

🎨 Color Contrast

Body and label text meets WCAG AA (4.5:1) against the page background. Verified by measurement, not by eye.

🎬 Reduced Motion

With prefers-reduced-motion set, scroll animations and the quiz's decorative emoji are switched off and all content is shown immediately.

📱 Responsive Design

Every module works at phone width. No page scrolls sideways.

Details

Landmarks: every page has a <main> region and a skip link as its first tabbable element.
Focus indicators: a visible focus ring on every focusable element, shown for keyboard users and suppressed for mouse users via :focus-visible.
Menu state: the mobile menu reports aria-expanded, closes on Escape, and returns focus to the button that opened it.
Target size: standalone links and buttons are at least 24×24 CSS pixels.
Alt text: images carry descriptive alternatives; decorative icons are hidden from assistive technology.
Color independence: correct and incorrect answers are labelled in text, not signalled by color alone.

Known Limitations

These are real gaps we have not closed yet. If one of them blocks you, please tell us — it moves up the list.

Only the Quick Check quiz has been fully converted to keyboard-operable controls. The MFA, smishing, email lab, targeted phishing and Phish or Treat modules still use click-driven elements and are not yet keyboard or screen-reader complete.
Result and feedback panels appear without announcing themselves, so a screen reader user may not know a new panel has opened.
Phish or Treat is timed, which is a barrier for anyone who needs longer to read. There is no way to extend or disable the timer.
The site has not been tested end to end with NVDA, JAWS or VoiceOver.

Conformance Status

Partially conformant with WCAG 2.1 Level AA. "Partially conformant" means some parts of the site do not fully meet the standard — specifically the training modules listed under Known Limitations above. The site chrome, the homepage, the reference pages and the Quick Check quiz are believed to meet AA.

Feedback & Assistance

We welcome feedback on the accessibility of Just For Phishing. If you encounter accessibility barriers:

Visit our Contact page to report issues
Open an issue on GitHub with the "accessibility" label
Describe the specific issue and the steps to reproduce it
Include information about your assistive technology (if applicable)

Compatibility

Built and tested against current versions of Chrome, Firefox, Safari and Edge, with keyboard-only navigation and browser zoom to 200%. Screen reader support is a goal rather than a tested claim — see Known Limitations.

Third-Party Content

Some pages may link to external resources. We are not responsible for the accessibility of third-party websites.

Continuous Improvement

This is an open-source project, and we encourage contributions that improve accessibility. If you're a developer interested in helping make Just For Phishing more accessible, please visit our GitHub repository.

Contact Us

For accessibility questions or to report issues, please contact us. We typically respond within 3-5 business days.