+APP.1.2.A6 Password Management in Web Browsers (B)

APP.1.2.A6 Password Management in Web Browsers (B)

If a password manager is used in a web browser, it MUST create a direct and unique relationship between each webpage and the password stored for it. The stored passwords MUST be encrypted. It MUST be ensured that the passwords stored in the password manager can only be accessed after entering a master password. Furthermore, it MUST be ensured that the authentication for password-protected access is only valid only for the current session.

The IT Operation Department MUST ensure that web browsers allow users to delete stored passwords.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information