OWASPASVS 5.0 requirement
ASVS-V6.1.2 A list of context-specific words is documented in order to prevent their use in passwords.
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.1 Authentication Documentation
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that a list of context-specific words is documented in order to prevent their use in passwords. The list could include permutations of organization names, product names, system identifiers, project codenames, department or role names, and similar.