Manifest position 812 · CrUX rank bucket 1000

https://accounts.digitallocker.gov.in

Partial after retries

57 of 58 checks were judged conclusively. End-to-end account completion is blocked by the requirement for a real mobile/Aadhaar identity and OTP.

Attempts
3 / 3
Judged checks
57 / 58
Blocked
1
Not run
0
This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / checkStatusConfidenceEvidence or reason
respect-user-preferences
respects-color-scheme
issueshighThe dark-mode screenshot is visually identical to light mode; the preference probe reports prefers-color-scheme: dark=true while body remains rgb(255,255,255) and computed color-scheme is normal.
F01 medium: System dark-mode preference is ignored.
respect-user-preferences
respects-reduced-motion
passhighReduced-motion probe sampled the carousel four times over 7.5s and its transform stayed unchanged; no Web Animations were active.
respect-user-preferences
respects-contrast
passhighForced-colors mobile screenshot retains visible text, controls, borders and carousel actions.
implement-natural-interactions
view-transitions
issueshighThe platform probe found no view-transition CSS and the representative routes are separate MPA documents.
F02 low: Page changes are abrupt full-document navigations with no View Transition enhancement.
implement-natural-interactions
scroll-driven-animations
not-applicablehighNo scroll-linked parallax, scrollytelling or reveal behavior exists on the representative pages, so there is no scroll-linked implementation to assess.
implement-natural-interactions
physical-gestures
issueshighThe HAR and DOM show Swiper plus Owl Carousel scripts and no scroll-driven CSS; the mobile screenshot shows custom carousel controls.
F03 low: Carousel interaction is implemented by two JavaScript carousel libraries rather than platform scroll snap.
provide-guided-navigation
scroll-state-aware-chrome
issueshighDOM styles show a fixed-top header; platform CSS inspection found no scroll-state/container treatment or scroll timeline.
F04 low: The fixed header does not adapt to scroll state.
provide-guided-navigation
anchored-positioning
issueshighThe platform probe found two custom overlays, no popover/dialog elements, and no anchor positioning CSS.
F05 low: Dropdowns and overlays rely on custom/Bootstrap positioning rather than resilient anchored primitives.
provide-guided-navigation
directs-attention
passhighThe ecosystem page presents a visible in-page section menu followed by a matching blue “Why DigiLocker?” heading; carousel actions are explicitly labeled.
maximize-content-reduce-noise
no-intrusive-interruptions
issueshighThe 360x800 login screenshot shows a fixed “DigiLocker is better on mobile app” banner occupying the bottom edge before interaction.
F06 medium: The login page opens with a fixed app-download banner covering the bottom of the primary flow.
maximize-content-reduce-noise
semantic-dismissible-primitives
issueshighThe platform probe counted custom .modal/.dropdown-menu overlays but zero dialog, popover, or details elements.
F07 medium: Transient UI is built from custom modal/dropdown markup instead of semantic primitives.
maximize-content-reduce-noise
reduced-chrome
passhighHomepage, content and login screenshots devote the dominant viewport area to task/content; persistent chrome is compact.
adapt-to-the-form-factor
responsive-no-horizontal-scroll
issueshighThe 360px layout capture reports scrollWidth 374px and horizontalOverflowPx 14.
F08 medium: The home page overflows horizontally on a narrow viewport.
adapt-to-the-form-factor
component-level-responsiveness
issueshighLive CSS inspection found no @container rules or container-type on the page.
F09 low: Reusable cards and carousels respond only to viewport breakpoints.
adapt-to-the-form-factor
input-modality-aware
issueshighThe focus probe focused header controls and CTAs; computed outline was none and box-shadow none. Several header buttons are only 30x30px.
F10 high: Keyboard focus is not visibly indicated on primary controls.
support-core-task-success
clear-purpose-and-primary-action
passhighHomepage exposes Login/Register and document exploration; login page states “Login or Create Account” and asks for the single next input.
support-core-task-success
primary-flow-completion
blockedhighEnd-to-end account access requires a real Indian mobile/Aadhaar identity and OTP. The public flow was attempted through the required phone field, but no test credential was available.
support-core-task-success
clear-system-state-and-recovery
issueshighSubmitting the empty required mobile field yields only the browser validationMessage; aria-invalid and aria-describedby remain absent and the page error region is empty.
F11 medium: Invalid login input is not exposed as an actionable accessible error.
be-fast-and-stable
good-core-web-vitals
issueshighLighthouse measured LCP 7.3s and CLS 0.342 (performance score 0.53); the independent trace measured LCP 2.16s, showing substantial run variability but corroborating late visual work.
F12 high: Cold mobile performance is outside the good Core Web Vitals range.
be-fast-and-stable
visual-stability
issueshighMobile layout observation measured CLS 0.158; Lighthouse measured 0.342 and identifies unsized carousel and accessibility-widget images as culprits. The image audit found 88 of 89 images without dimensions.
F13 high: Unsized images and late widget/carousel insertion cause visible layout shift.
be-fast-and-stable
efficient-main-thread
passhighTrace recorded one 57.76ms long task and only 7.76ms total blocking time; Lighthouse TBT was 0ms.
be-fast-and-stable
efficient-resource-delivery
issueshighHAR shows five VeryHigh-priority parser stylesheets and a synchronous Swiper script in head; many large CDN resources have no cache header. Lighthouse reports a 2.795s longest dependency chain.
F14 high: The critical path includes blocking scripts/styles and ineffective caching.
be-fast-and-stable
trim-unused-and-duplicate-code
issueshighHAR records Swiper and Owl Carousel plus jQuery, Bootstrap, Popper, Font Awesome, chatbot and accessibility bundles; script transfer is 207KB and a 158KB icon font is loaded.
F15 medium: Two carousel libraries and broad UI bundles are shipped for one landing page.
be-inclusive
names-roles-labels
issueshighLighthouse reports an unnamed accessibility-widget close button, an unlabeled menu checkbox and an image without alt; the image audit found six missing alt attributes. The login mobile field has no associated label.
F16 high: Important controls and images lack accessible names or labels.
be-inclusive
sufficient-contrast
passhighLighthouse color-contrast audit passed and forced-colors screenshot preserves readable text/control boundaries.
be-inclusive
structure-and-focus
issueshighLighthouse reports no main landmark, nonsequential heading order, role=presentation conflicts and tabindex=1. The home page has no h1; content pages also omit main landmarks.
F17 high: Landmark, heading, role and focus structure is invalid.
be-inclusive
legible-text
passhighMobile screenshots show readable body text, clear spacing, and no clipping on content/login templates.
be-inclusive
zoom-reflow-targets-and-media
passhighViewport allows scaling, Lighthouse meta-viewport and target-size audits pass, and login/content templates have no horizontal overflow at 360px. No time-based media requiring captions appears.
follow-best-practices
no-console-errors
passhighLighthouse errors-in-console audit passed with no logged errors.
follow-best-practices
sound-document-and-assets
issueshighLighthouse confirms doctype/charset and aspect-ratio rendering, but the dedicated image audit found 88/89 images without dimensions, 11 oversized images and 23 without responsive sources.
F18 medium: Image markup is structurally incomplete despite a valid document shell.
follow-best-practices
browser-platform-hygiene
issueshighLighthouse’s inspector-issues audit identifies a cookie issue on the aistore.myscheme.in embedded resource.
F19 low: Chrome records an inspector issue from an embedded third-party response.
be-discoverable
title-and-description
passhighHomepage has a descriptive title and meta description in both raw and rendered HTML.
be-discoverable
crawlable-and-mobile-friendly
issueshighLighthouse reports javascript:void(0) anchors; recon enumerates multiple empty-text links and social links implemented as script-triggered placeholders.
F20 medium: Some links are not crawlable and many icon links have no descriptive text.
be-discoverable
canonical-and-indexing-signals
issueshighDirect requests to both /robots.txt and /sitemap.xml return HTTP 403 AccessDenied while the page declares index,follow.
F21 medium: robots.txt and sitemap.xml are inaccessible.
be-discoverable
structured-and-shareable-metadata
passhighHomepage includes accurate WebSite, GovernmentOrganization and GovernmentService JSON-LD plus Open Graph and Twitter metadata matching visible DigiLocker content.
be-private-and-secure
secure-transport-and-headers
issueshighHeader inspection finds a CSP but script-src includes unsafe-eval and style-src includes unsafe-inline, weakening XSS protection on an identity service.
F22 high: The Content Security Policy permits unsafe script evaluation.
be-private-and-secure
data-minimisation-and-third-parties
passhighNetwork capture found no known trackers, no exposed secrets and one secure first-party preference cookie; observed third parties are DigiLocker/government service infrastructure.
be-private-and-secure
in-context-permissions-and-modern-auth
issueshighThe login page exposes only a telephone form; source probe found no navigator.credentials/WebAuthn integration. No permission prompt fires on load.
F23 high: The public authentication entry offers phone OTP only, with no phishing-resistant sign-in option.
be-private-and-secure
defensive-browser-policies
issueshighAlthough HSTS, nosniff, X-Frame-Options, Referrer-Policy and Permissions-Policy are present, CSP frame-ancestors permits numerous wildcard domains and the policy relies on unsafe-eval/unsafe-inline.
F24 medium: Browser defenses are broad rather than least-privilege.
be-resilient
progressive-enhancement
passhighRaw HTML is a substantive 71KB document with 68% rendered-word coverage, title and description; crawler screenshot retains the main public content rather than an empty JS shell.
be-resilient
resilient-runtime-behaviour
issueshighThe live DOM contains custom modal/dropdown UI but no dialog, popover or anchor-positioning primitives.
F25 medium: Custom overlays are not using resilient top-layer and fallback positioning.
be-resilient
offline-and-installable
issueshighThe platform probe found zero service-worker registrations and recon found no web app manifest, despite mobile-web-app-capable metadata.
F26 medium: The app-like service is neither installable nor backed by an offline fallback.
be-resilient
network-and-http-failure-states
issueshighA representative bad route renders a bare XML AccessDenied response with no title, navigation, explanation, or route back to DigiLocker.
F27 high: Unknown routes expose raw infrastructure errors with no recovery.
be-internationalised
lang-dir-and-logical-properties
passhighThe document declares html lang=en, exposes 13 Indian language options, and CSS inspection found logical properties.
be-internationalised
locale-aware-data
issueshighAfter activating the Hindi option and waiting, html lang remained en and “Last Updated” remained in English.
F28 medium: The visible language control did not switch locale during the probe and the date remained English.
be-internationalised
time-zone-correctness
not-applicablehighRepresentative public pages contain no event scheduling, time-zone conversion, recurring event or partial-time concept.
be-trustworthy
no-dark-patterns
passhighThe public login entry states the action and Terms of Service before continuation; OTP/Aadhaar alternatives and app-promo dismissal are visible, with no preselected paid continuity.
be-trustworthy
humane-error-handling
issueshighSubmitting the empty required mobile field yields only the browser validationMessage; aria-invalid and aria-describedby remain absent and the page error region is empty.
F11 medium: Invalid login input is not exposed as an actionable accessible error.
be-trustworthy
trustworthy-input-assistance
issueshighThe login probe reports autocomplete=off and an empty labels collection for the required telephone field.
F29 high: The mobile number field disables autofill and has no label.
be-trustworthy
safe-commercial-and-account-flows
issueshighThe login page exposes only a telephone form; source probe found no navigator.credentials/WebAuthn integration. No permission prompt fires on load.
F23 high: The public authentication entry offers phone OTP only, with no phishing-resistant sign-in option.
be-sustainable
optimised-assets
issueshighThe image audit found 11 oversized images, 21 legacy-format images and 23 images without srcset; four 2280px JPEG banners transfer about 890KB combined.
F30 medium: Landing-page imagery is oversized and uses legacy formats without responsive selection.
be-sustainable
no-wasteful-work
passhighTrace observed negligible blocking work and tracker scan found no known analytics trackers; the load performs three task-related fetches without ongoing media playback.
be-sustainable
third-party-and-media-budget
issueshighHAR records Swiper and Owl Carousel plus jQuery, Bootstrap, Popper, Font Awesome, chatbot and accessibility bundles; script transfer is 207KB and a 158KB icon font is loaded. The image audit found 11 oversized images, 21 legacy-format images and 23 images without srcset; four 2280px JPEG banners transfer about 890KB combined.
F15 medium: Two carousel libraries and broad UI bundles are shipped for one landing page.
F30 medium: Landing-page imagery is oversized and uses legacy formats without responsive selection.
be-agent-ready
structured-agent-capabilities
issueshighDiscoverability shows content is crawlable, but the platform probe found no WebMCP registration and Lighthouse agentic-browsing scored 0.17.
F31 low: A high-value document service exposes no structured agent capability.
be-agent-ready
on-device-inference
not-applicablehighNo summarisation or generative feature is presented to users; introducing on-device inference would not currently serve an identified task.
be-memory-efficient
no-leak-under-repeated-interaction
passhighAfter ten menu open/close cycles, heap self-size fell from 12,186,171 to 12,034,364 bytes and node count fell from 184,871 to 184,836.
be-memory-efficient
bounded-footprint
passhighSingle-page heap is about 12.2MB across 184,871 snapshot nodes, proportionate to this image/card landing page.
be-memory-efficient
no-detached-dom-or-unbounded-listeners
passhighTen menu cycles produced no node-count growth (35 fewer nodes) and no growing Detached* constructor appears in top constructor summaries.

Provenance

Canonical report: results/atomic/reports/0812-accounts_digitallocker_gov_in.json
Report SHA-256: dcc6032edf5d21a3d0f2dbd677e4c39c79dcb780f32609d92a4486403cc2e276
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/accounts_digitallocker_gov_in/2026-07-28T07-53-58-817Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/accounts_digitallocker_gov_in/2026-07-28T07-53-58-817Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.