OWASPASVS 5.0 requirement

ASVS-V13.3.4 Secrets are configured to expire and be rotated based on the application's documentation.

L3 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V13 Configuration
Section
V13.3 Secret Management
Level
L3 (requirement applies from this verification level up)

Requirement

Verify that secrets are configured to expire and be rotated based on the application's documentation.