OWASPASVS 5.0 requirement

ASVS-V6.2.1 User set passwords are at least 8 characters in length although a minimum of 15 characters is strongly recommended.

L1 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V6 Authentication
Section
V6.2 Password Security
Level
L1 (requirement applies from this verification level up)

Requirement

Verify that user set passwords are at least 8 characters in length although a minimum of 15 characters is strongly recommended.