+APP.1.2.A6 Password Management in Web Browsers (B)

APP.1.2.A6 Password Management in Web Browsers (B)

If a password manager is used in a web browser, it MUST create a direct and unique relationship between each webpage and the password stored for it. The stored passwords MUST be encrypted. It MUST be ensured that the passwords stored in the password manager can only be accessed after entering a master password. Furthermore, it MUST be ensured that the authentication for password-protected access is only valid only for the current session.

The IT Operation Department MUST ensure that web browsers allow users to delete stored passwords.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information