Authentication Testing Checklist for Web Applications
Use this checklist to review login, registration, password reset, session management, MFA, and account recovery flows.
OWASP WSTG
Use this checklist to review login, registration, password reset, session management, MFA, and account recovery flows.