OWASPASVS 5.0 requirement
ASVS-V6.2.6 Password input fields use type=password to mask the entry.
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.2 Password Security
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that password input fields use type=password to mask the entry. Applications may allow the user to temporarily view the entire masked password, or the last typed character of the password.