OWASPASVS 5.0 requirement

ASVS-V6.5.7 Biometric authentication mechanisms are only used as secondary factors together with either something you have or something you know.

L3 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V6 Authentication
Section
V6.5 General Multi-factor authentication requirements
Level
L3 (requirement applies from this verification level up)

Requirement

Verify that biometric authentication mechanisms are only used as secondary factors together with either something you have or something you know.