Hi,

 Is it possible to use the PasswordRecovery control to retrieve the password, using the Question and Answer,
then displaying the password on screen. I do not want to send the password to email.

 Any alternative method besides using PasswordRecovery control is appreciated.

Thank you for your help.

If you dont send an email, then you are relying on your user to remember their secret question /pass phase or what ever your going to use.  If they have forgotten their password they will probably forget that as well!?

I am intending to run this inside an intranet. The users have limited access to resources. They cannot access the internet. There is no email service set up too as we do not want them to waste time and resources. This application is only for recording and tracking purposes. They do work on computer terminals.

Is it then possible perhaps for the admin to view the password(then I'll probably not encrypt the password in the DB?). Then allow the user to relogin(by telling the password), thereafter allowing him to change the pass using the ChangePassword control.

You could hash your passwords, then allow an admin to write over the old (forgotten) password with a new password?

You have to set in web.config

Hi

try this in web.config

<membership defaultProvider="MyProvider" userIsOnlineTimeWindow="25">
   <providers>
    <add name="MyProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" connectionStringName="Bag_ConnStr" applicationName="/" enablePasswordRetrieval="true" enablePasswordReset="true" requiresQuestionAndAnswer="false" requiresUniqueEmail="true" passwordFormat="Clear" maxInvalidPasswordAttempts="5" minRequiredPasswordLength="5" minRequiredNonalphanumericCharacters="0" passwordAttemptWindow="10" passwordStrengthRegularExpression=""/>
   </providers>
  </membership>

for more infomation

http://www.asp.net/Learn/security/tutorial-13-vb.aspx

Good Luck

I think you can not display the password on screen

See the following diagram (takes from asp.net site)

What is the status of your thread

If any answer helps you, Please mark it as answer so it will help for other people

How you are storing the Google password also how u are accesing it.

Please explain in brief

Have you tried my solution, Have you solved your query

Have you ever experienced the Password Recovery Control sending a blank for the

password in the email?  I'm working on a system that implements the Membership

Service and everything works fine except when the user tries to recover their

password.  The email that is sent to them DOES NOT contain their password, even

though I can see it stored in the system tables (i.e.,  using Clear).... 

Try this in web.config

<membership defaultProvider="MyProvider" userIsOnlineTimeWindow="25">
   <providers>
    <add name="MyProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" connectionStringName="Bag_ConnStr" applicationName="/" enablePasswordRetrieval="true" enablePasswordReset="true" requiresQuestionAndAnswer="false" requiresUniqueEmail="true" passwordFormat="Clear" maxInvalidPasswordAttempts="5" minRequiredPasswordLength="5" minRequiredNonalphanumericCharacters="0" passwordAttemptWindow="10" passwordStrengthRegularExpression=""/>
   </providers>
  </membership>

Any updates on this

Protected Sub PasswordRecovery1_SendingMail(ByVal sender As Object, ByVal e As System.Web.UI.WebControls.MailMessageEventArgs) Handles PasswordRecovery1.SendingMail

e.Cancel = True
PasswordRecovery1.SuccessText = e.Message.Body

End Sub

So you mean to say, the mail which sends to user it get cancelled (due to e.Cancel = True) and password is displayed on screen