OWASPASVS 5.0 requirement
ASVS-V6.5.1 Lookup secrets, out-of-band authentication requests or codes, and time-based one-time passwords (totps) are only successfully usable once.
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.5 General Multi-factor authentication requirements
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that lookup secrets, out-of-band authentication requests or codes, and time-based one-time passwords (TOTPs) are only successfully usable once.