OWASPASVS 5.0 requirement

ASVS-V6.2.4 Passwords submitted during account registration or password change are checked against an available set of, at least, the top 3000…

L1 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V6 Authentication
Section
V6.2 Password Security
Level
L1 (requirement applies from this verification level up)

Requirement

Verify that passwords submitted during account registration or password change are checked against an available set of, at least, the top 3000 passwords which match the application's password policy, e.g. minimum length.