00. Authenticate - general

Checklist ref

2AU.00.02

Area

2AU. Authenticate

Wireframe ref

Type

CX Standard

Requirement level

MUST NOT

Participant

Data Holder

Statement

Data holders MUST NOT include forgotten details links in redirect screens. The inclusion of such links is considered to increase the likelihood of phishing attacks.

Reference

Authentication Standards, Authentication: Password link | CX Research 21

Example

Authenticate: Redirect with One Time Password

Version introduced

1.4.0 or earlier

Date introduced

12 August 2020 or earlier

Date modified

Status

Active