OWASPASVS 5.0 requirement

ASVS-V6.2.12 Passwords submitted during account registration or password changes are checked against a set of breached passwords.

L2 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V6 Authentication
Section
V6.2 Password Security
Level
L2 (requirement applies from this verification level up)

Requirement

Verify that passwords submitted during account registration or password changes are checked against a set of breached passwords.