A software bug in the Swiss government’s AGOV login system prevented users with French AZERTY keyboard layouts from entering verification codes due to restrictive JavaScript input handling.

Key Points

• The AGOV system, launched in 2024, serves as the mandatory digital gateway for Swiss government services, including tax filings and citizenship applications.
• A technical flaw in the registration form rejected the "Shift" key, which is required to type digits on standard French AZERTY keyboards.
• The system’s reliance on a single, gated web form for both user registration and technical support created a "chicken and egg" lockout for affected users.
• Developers implemented a custom JavaScript logic that intercepted keystrokes and bypassed standard browser form behavior, complicating troubleshooting for end users.
• The author successfully bypassed the bug by temporarily switching their operating system's keyboard layout to QWERTY.

Why it Matters

This incident highlights the risks of over-engineering web forms and centralizing government services behind rigid, non-standard authentication interfaces. It demonstrates how excluding diverse hardware and software configurations can inadvertently disenfranchise significant user populations, including international residents and cross-border workers.