Forgot password and security questions

Question

In my e-Commerce site, the user forgot his password and security questions. So, he can't even use forgot password option. He approached me as the developer of the site. Is there anyway I can retrieve his password? Passwords are encrypted.

Niradhip Chakraborty · Answer

By default,the membership provider will hash the passwords,and since hashed password can't be recovered because hashing is a one way function you have to use Clear Text or Encrypted for the password format. To be able to get the password in clear text using MembershipUser.GetPassword method , you have to configure the membership provider to allow password retrieval. Then you can decided to use ClearText or Encrypted for the Password format, in any case you will be able to get the user password using MembershipUser.GetPassword( http://msdn.microsoft.com/en-us/library/2x0c6sfa.aspx ) method. Please take a look at this example http://msdn.microsoft.com/en-us/library/system.web.security.membership.enablepasswordretrieval.aspx

r p · Answer

I am using CreateUserWizard for users to create their accounts. I don't use any encryption code. The encryption is done by CreateUserWizard. Thanks

Niradhip Chakraborty · Answer

He might have user Name and that will be unique you can write a query to get the password from table Something like. Select usn_vch_password from user where Usn_vch_UserId = ‘steve’; When you run this query you will get the password which is in encrypted, now you need to decrypt it by using same logic what you have used in your code.

Forgot password and security questions

Answers (3)