OWASPASVS 5.0 requirement

ASVS-V6.4.5 Renewal instructions for authentication mechanisms which expire are sent with enough time to be carried out before the old authentication…

L3 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V6 Authentication
Section
V6.4 Authentication Factor Lifecycle and Recovery
Level
L3 (requirement applies from this verification level up)

Requirement

Verify that renewal instructions for authentication mechanisms which expire are sent with enough time to be carried out before the old authentication mechanism expires, configuring automated reminders if necessary.