OWASPASVS 5.0 requirement
ASVS-V6.3.6 Email is not used as either a single-factor or multi-factor authentication mechanism.
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.3 General Authentication Security
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that email is not used as either a single-factor or multi-factor authentication mechanism.