← Back to Baseline

MB-R159

HUMAN VERIFICATION REQUIRED ASVS 6.2.10 No forced periodic rotation

MB-C15 ASVS Level 2 Human Assurance High

A user's password stays valid until it is discovered to be compromised or the user rotates it. The application must not require periodic credential rotation.