How to decrypt a password of aspnetuser table

Mark Tabor

5y4.3k.NET

I have taken an open source HRM in which there is a users created , I do not know the password and on the database i only see the hash i am not sure which hash aspnetuser (owin) is using how to see the password.

that is my password hash

"APWAh/SDKj9QFUhTXfxlU/u/o0PHTrH/anvF51TMSMoMSreuCs7hrZWbuaNDYKG6gg=="

Thanks in advance

4 Replies

Know the answer? Post it — somebody with the same question will find it here.

Jignesh Kumar5y ago
Hi Mark,

While storing password which hashing technique used need to check and for getting password you need to apply decrypt using same technique.
Sachin Singh5y ago
check the default login method under account controller there you will find , how they compare stored password with entered psd.
Mark Tabor5y ago
I have a table with

I generate these password using PBKDf2 online but still it says invalid password I change securityStamp with SALT value that might be the reason
Sachin Singh5y ago
Asp.Net Identity uses PBKDf2 ,you can check in github as they are open source
Version 2:
* PBKDF2 with HMAC-SHA1, 128-bit salt, 256-bit subkey, 1000 iterations.
* (See also: SDL crypto guidelines v5.1, Part III)
* Format: { 0x00, salt, subkey }
*
* Version 3:
* PBKDF2 with HMAC-SHA256, 128-bit salt, 256-bit subkey, 10000 iterations.
* Format: { 0x01, prf (UInt32), iter count (UInt32), salt length (UInt32), salt, subkey }
* (All UInt32s are stored big-endian.)
as , they are one way , you can't get the original password , you can only compare by hashing the entered password with the stored password.