Password Recovery without using email. RRS feed

  • Question

  • User572115009 posted


     Is it possible to use the PasswordRecovery control to retrieve the password, using the Question and Answer,
    then displaying the password on screen. I do not want to send the password to email.

     Any alternative method besides using PasswordRecovery control is appreciated.

    Thank you for your help.

    Friday, July 27, 2007 4:36 AM

All replies

  • User1186257875 posted

    If you dont send an email, then you are relying on your user to remember their secret question /pass phase or what ever your going to use.  If they have forgotten their password they will probably forget that as well!?

    Friday, July 27, 2007 5:48 AM
  • User572115009 posted

    I am intending to run this inside an intranet. The users have limited access to resources. They cannot access the internet. There is no email service set up too as we do not want them to waste time and resources. This application is only for recording and tracking purposes. They do work on computer terminals.

    Is it then possible perhaps for the admin to view the password(then I'll probably not encrypt the password in the DB?). Then allow the user to relogin(by telling the password), thereafter allowing him to change the pass using the ChangePassword control.

    Friday, July 27, 2007 6:00 AM
  • User1186257875 posted

    You could hash your passwords, then allow an admin to write over the old (forgotten) password with a new password?

    Friday, July 27, 2007 6:07 AM
  • User555306248 posted

    You have to set in web.config

    <add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="true" applicationName="/" requiresUniqueEmail="false" passwordFormat="Hashed"  />

    set the passwordFormat according to your need

    Tuesday, July 31, 2007 11:40 PM
  • User555306248 posted

    I think you can not display the password on screen

    See the following diagram (takes from asp.net site)

    The RequiresQuestionAndAnswer, EnablePasswordRetrieval, and EnablePasswordReset
        Influence the PasswordRecovery control’s Appearance and Behavior

    Sunday, July 13, 2008 11:27 PM
  • User555306248 posted

    What is the status of your thread

    If any answer helps you, Please mark it as answer so it will help for other people

    Monday, July 21, 2008 11:24 PM
  • User555306248 posted

    How you are storing the Google password also how u are accesing it.

    Please explain in brief

    Tuesday, July 22, 2008 11:24 PM
  • User555306248 posted

    Have you tried my solution, Have you solved your query

    Monday, July 28, 2008 11:24 PM
  • User1515585197 posted

    Have you ever experienced the Password Recovery Control sending a blank for the

    password in the email?  I'm working on a system that implements the Membership

    Service and everything works fine except when the user tries to recover their

    password.  The email that is sent to them DOES NOT contain their password, even

    though I can see it stored in the system tables (i.e.,  using Clear).... 

    Monday, August 25, 2008 12:02 PM
  • User555306248 posted

    Try this in web.config

    <membership defaultProvider="MyProvider" userIsOnlineTimeWindow="25">
        <add name="MyProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" connectionStringName="Bag_ConnStr" applicationName="/" enablePasswordRetrieval="true" enablePasswordReset="true" requiresQuestionAndAnswer="false" requiresUniqueEmail="true" passwordFormat="Clear" maxInvalidPasswordAttempts="5" minRequiredPasswordLength="5" minRequiredNonalphanumericCharacters="0" passwordAttemptWindow="10" passwordStrengthRegularExpression=""/>

    Monday, August 25, 2008 11:28 PM
  • User555306248 posted

    Any updates on this

    Monday, October 20, 2008 11:31 PM
  • User-233417051 posted

    Protected Sub PasswordRecovery1_SendingMail(ByVal sender As Object, ByVal e As System.Web.UI.WebControls.MailMessageEventArgs) Handles PasswordRecovery1.SendingMail

    e.Cancel = True
    PasswordRecovery1.SuccessText = e.Message.Body

    End Sub

    Monday, October 27, 2008 4:51 PM
  • User555306248 posted

    So you mean to say, the mail which sends to user it get cancelled (due to e.Cancel = True) and password is displayed on screen

    Thursday, October 30, 2008 11:26 PM
  • User555306248 posted

    Good one , working

    Wednesday, November 5, 2008 10:34 PM
  • User-2051918309 posted

    Hi.  I'm wondering if smtp is the only means to email a password with the PasswordRecovery control as my (inept) IT department refuses to open up that port.  I'm hoping it's possible to configure an Exchange account.  Thanks.

    Thursday, October 22, 2009 2:03 PM
  • User555306248 posted

    What you want exactly 

    Thursday, October 22, 2009 11:11 PM