Verify the web page which contains important data like password, credit card numbers, secret answers for security question etc should be submitted via HTTPS (SSL). Verify the important information like password, credit card numbers etc should display in encrypted format. Verify password rules are implemented on all authentication pages like Registration, forgot password, change password. Verify if the password is changed the user should not be able to login with the old password. Verify the error messages should not display any important information. Verify if the user is logged out from the system or user session was expired, the user should not be able to navigate the site. Verify to access the secured and non secured web pages directly without login. Verify the “View Source code” option is disabled and should not be visible to the user. Verify the user account gets locked out if the user is entering the wrong password several times. Verify the cookies should not store pas...