OWASPASVS 5.0 requirement
ASVS-V6.2.5 Passwords of any composition can be used, without rules limiting the type of characters permitted.
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.2 Password Security
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that passwords of any composition can be used, without rules limiting the type of characters permitted. There must be no requirement for a minimum number of upper or lower case characters, numbers, or special characters.