OWASPASVS 5.0 requirement

ASVS-V6.4.4 If a multi-factor authentication factor is lost, evidence of identity proofing is performed at the same level as during enrollment.

L2 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V6 Authentication
Section
V6.4 Authentication Factor Lifecycle and Recovery
Level
L2 (requirement applies from this verification level up)

Requirement

Verify that if a multi-factor authentication factor is lost, evidence of identity proofing is performed at the same level as during enrollment.