OWASPASVS 5.0 requirement
ASVS-V6.4.1 System generated initial passwords or activation codes are securely randomly generated, follow the existing password policy, and expire…
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.4 Authentication Factor Lifecycle and Recovery
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that system generated initial passwords or activation codes are securely randomly generated, follow the existing password policy, and expire after a short period of time or after they are initially used. These initial secrets must not be permitted to become the long term password.