spec 1 linked patterns checked
OWASP Authentication Cheat Sheet password strength controls
Documents password strength controls including minimum length, at least 64 character maximum support, no silent truncation, all characters including Unicode and whitespace, no composition rules, password strength meters, breached-password blocking, and avoiding periodic password changes.
Read with a purpose
What this source can teach
Use this source to check a technical or accessibility requirement against its exact wording and scope.
- Start with the original. Open the source and find the guidance or example relevant to your task.
- Trace the connection. Use the claim notes below to see how this site applies the source to specific patterns.
- Check the setting. Compare the source's platform, people, and constraints with your own decision.
Pattern Decisions This Source Supports
| Pattern | Supported decision | Required contract | Claim note |
|---|---|---|---|
| Password creation | Choose password creation when the user must choose or replace a reusable password, passphrase, or memorized secret. | Typing, paste, autofill, password-manager generation, deletion, and selection follow native input behavior. | OWASP supports length controls, no silent truncation, all characters, no composition rules, strength meters, breached-password blocking, and avoiding periodic changes. |
Comparisons supported by this source
- Password creation vs password input vs inline validation vs error summary
OWASP supports length, no silent truncation, all characters, no composition rules, strength meters, breached-password blocking, and avoiding periodic changes.
Evidence Role
This source is treated as spec evidence. Its value comes from the specific claims and setting described above.
Publisher: OWASP Cheat Sheet Series. Last checked: .