OWASPASVS 5.0 requirement
ASVS-V6.2.10 A user's password stays valid until it is discovered to be compromised or the user rotates it.
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.2 Password Security
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that a user's password stays valid until it is discovered to be compromised or the user rotates it. The application must not require periodic credential rotation.