OWASPASVS 5.0 requirement

ASVS-V6.3.2 Default user accounts (e.g., "root", "admin", or "sa") are not present in the application or are disabled.

L1 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V6 Authentication
Section
V6.3 General Authentication Security
Level
L1 (requirement applies from this verification level up)

Requirement

Verify that default user accounts (e.g., "root", "admin", or "sa") are not present in the application or are disabled.