Password Recovery without using email.

Question

User572115009 posted

Hi,

 Is it possible to use the PasswordRecovery control to retrieve the password, using the Question and Answer,
then displaying the password on screen. I do not want to send the password to email.

 Any alternative method besides using PasswordRecovery control is appreciated.

Thank you for your help.

Answer 1

User1186257875 posted

If you dont send an email, then you are relying on your user to remember their secret question /pass phase or what ever your going to use.  If they have forgotten their password they will probably forget that as well!?

Answer 2

User572115009 posted

I am intending to run this inside an intranet. The users have limited access to resources. They cannot access the internet. There is no email service set up too as we do not want them to waste time and resources. This application is only for recording and tracking purposes. They do work on computer terminals.

Is it then possible perhaps for the admin to view the password(then I'll probably not encrypt the password in the DB?). Then allow the user to relogin(by telling the password), thereafter allowing him to change the pass using the ChangePassword control.

Answer 3

User1186257875 posted

You could hash your passwords, then allow an admin to write over the old (forgotten) password with a new password?

Answer 4

User555306248 posted

You have to set in web.config

<add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="true" applicationName="/" requiresUniqueEmail="false" passwordFormat="Hashed"  />

set the passwordFormat according to your need

Answer 5

User555306248 posted

I think you can not display the password on screen

See the following diagram (takes from asp.net site)

Answer 6

User555306248 posted

What is the status of your thread

If any answer helps you, Please mark it as answer so it will help for other people

Answer 7

User555306248 posted

How you are storing the Google password also how u are accesing it.

Please explain in brief

Answer 8

User555306248 posted

Have you tried my solution, Have you solved your query

Answer 9

User1515585197 posted

Have you ever experienced the Password Recovery Control sending a blank for the

password in the email?  I'm working on a system that implements the Membership

Service and everything works fine except when the user tries to recover their

password.  The email that is sent to them DOES NOT contain their password, even

though I can see it stored in the system tables (i.e.,  using Clear).... 

Answer 10

User555306248 posted

Try this in web.config

<membership defaultProvider="MyProvider" userIsOnlineTimeWindow="25">
   <providers>
    <add name="MyProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" connectionStringName="Bag_ConnStr" applicationName="/" enablePasswordRetrieval="true" enablePasswordReset="true" requiresQuestionAndAnswer="false" requiresUniqueEmail="true" passwordFormat="Clear" maxInvalidPasswordAttempts="5" minRequiredPasswordLength="5" minRequiredNonalphanumericCharacters="0" passwordAttemptWindow="10" passwordStrengthRegularExpression=""/>
   </providers>
  </membership>

Answer 11

User555306248 posted

Any updates on this

Answer 12

User-233417051 posted

Protected Sub PasswordRecovery1_SendingMail(ByVal sender As Object, ByVal e As System.Web.UI.WebControls.MailMessageEventArgs) Handles PasswordRecovery1.SendingMail

e.Cancel = True
PasswordRecovery1.SuccessText = e.Message.Body

End Sub

Answer 13

User555306248 posted

So you mean to say, the mail which sends to user it get cancelled (due to e.Cancel = True) and password is displayed on screen

Answer 14

User555306248 posted

Good one , working

Answer 15

User-2051918309 posted

Hi.  I'm wondering if smtp is the only means to email a password with the PasswordRecovery control as my (inept) IT department refuses to open up that port.  I'm hoping it's possible to configure an Exchange account.  Thanks.

Answer 16

User555306248 posted

What you want exactly