Asked by:
Password Recovery without using email.

Question
-
User572115009 posted
Hi,
Is it possible to use the PasswordRecovery control to retrieve the password, using the Question and Answer,
then displaying the password on screen. I do not want to send the password to email.Any alternative method besides using PasswordRecovery control is appreciated.
Thank you for your help.
Friday, July 27, 2007 4:36 AM
All replies
-
User1186257875 posted
If you dont send an email, then you are relying on your user to remember their secret question /pass phase or what ever your going to use. If they have forgotten their password they will probably forget that as well!?
Friday, July 27, 2007 5:48 AM -
User572115009 posted
I am intending to run this inside an intranet. The users have limited access to resources. They cannot access the internet. There is no email service set up too as we do not want them to waste time and resources. This application is only for recording and tracking purposes. They do work on computer terminals.
Is it then possible perhaps for the admin to view the password(then I'll probably not encrypt the password in the DB?). Then allow the user to relogin(by telling the password), thereafter allowing him to change the pass using the ChangePassword control.
Friday, July 27, 2007 6:00 AM -
User1186257875 posted
You could hash your passwords, then allow an admin to write over the old (forgotten) password with a new password?
Friday, July 27, 2007 6:07 AM -
User555306248 posted
You have to set in web.config
<add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="true" applicationName="/" requiresUniqueEmail="false" passwordFormat="Hashed" />set the passwordFormat according to your need
Tuesday, July 31, 2007 11:40 PM -
User555306248 posted
I think you can not display the password on screen
See the following diagram (takes from asp.net site)
Sunday, July 13, 2008 11:27 PM -
User555306248 posted
What is the status of your thread
If any answer helps you, Please mark it as answer so it will help for other people
Monday, July 21, 2008 11:24 PM -
User555306248 posted
How you are storing the Google password also how u are accesing it.
Please explain in brief
Tuesday, July 22, 2008 11:24 PM -
User555306248 posted
Have you tried my solution, Have you solved your query
Monday, July 28, 2008 11:24 PM -
User1515585197 posted
Have you ever experienced the Password Recovery Control sending a blank for the
password in the email? I'm working on a system that implements the Membership
Service and everything works fine except when the user tries to recover their
password. The email that is sent to them DOES NOT contain their password, even
though I can see it stored in the system tables (i.e., using Clear)....
Monday, August 25, 2008 12:02 PM -
User555306248 posted
Try this in web.config
<membership defaultProvider="MyProvider" userIsOnlineTimeWindow="25">
<providers>
<add name="MyProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" connectionStringName="Bag_ConnStr" applicationName="/" enablePasswordRetrieval="true" enablePasswordReset="true" requiresQuestionAndAnswer="false" requiresUniqueEmail="true" passwordFormat="Clear" maxInvalidPasswordAttempts="5" minRequiredPasswordLength="5" minRequiredNonalphanumericCharacters="0" passwordAttemptWindow="10" passwordStrengthRegularExpression=""/>
</providers>
</membership>Monday, August 25, 2008 11:28 PM -
User555306248 posted
Any updates on this
Monday, October 20, 2008 11:31 PM -
User-233417051 posted
Protected Sub PasswordRecovery1_SendingMail(ByVal sender As Object, ByVal e As System.Web.UI.WebControls.MailMessageEventArgs) Handles PasswordRecovery1.SendingMail
e.Cancel = True
PasswordRecovery1.SuccessText = e.Message.BodyEnd Sub
Monday, October 27, 2008 4:51 PM -
User555306248 posted
So you mean to say, the mail which sends to user it get cancelled (due to e.Cancel = True) and password is displayed on screen
Thursday, October 30, 2008 11:26 PM -
User555306248 posted
Good one , working
Wednesday, November 5, 2008 10:34 PM -
User-2051918309 posted
Hi. I'm wondering if smtp is the only means to email a password with the PasswordRecovery control as my (inept) IT department refuses to open up that port. I'm hoping it's possible to configure an Exchange account. Thanks.
Thursday, October 22, 2009 2:03 PM -
User555306248 posted
What you want exactly
Thursday, October 22, 2009 11:11 PM