# Comparison of OWASP ASVS v3 and v4 Password Requirements

DevFeed: [Comparison of OWASP ASVS v3 and v4 Password Requirements](<https://devfeed.tech/articles/passwords-advice-36928.md>)

Original publisher: [Read original article](<https://shostack.org/blog/passwords-advice/>)

Author: adam

Published: 2019-06-26T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Requirements](<https://devfeed.tech/topics/requirements.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [standard](<https://devfeed.tech/topics/standard.md>)

Tags: [analysis](<https://devfeed.tech/tags/analysis.md>), [comparison](<https://devfeed.tech/tags/comparison.md>), [cost](<https://devfeed.tech/tags/cost.md>), [errors](<https://devfeed.tech/tags/errors.md>), [password](<https://devfeed.tech/tags/password.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [requirements](<https://devfeed.tech/tags/requirements.md>), [standard](<https://devfeed.tech/tags/standard.md>), [standards](<https://devfeed.tech/tags/standards.md>), [useful](<https://devfeed.tech/tags/useful.md>)

## AI overview

The article highlights Bruce Marshall's comparison of password requirements in OWASP ASVS versions 3 and 4. It argues that standards bodies should provide clear difference documents when updating or building on standards, because this reduces user analysis, errors, cost, and wasted effort.

## Source excerpt

Bruse Marshall has put together a useful comparison of password requirements from OWASP ASVS v3 and v4.