OWASPASVS 5.0 requirement
ASVS-V6.4.3 A secure process for resetting a forgotten password is implemented, that does not bypass any enabled multi-factor authentication mechanisms.
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.4 Authentication Factor Lifecycle and Recovery
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that a secure process for resetting a forgotten password is implemented, that does not bypass any enabled multi-factor authentication mechanisms.