Forgot password and security questions

Question

In my e-Commerce site the user forgot his password and security questions. So he can't even use forgot password option. He approached me as the developer of the site. Is there anyway I can retrieve his password? Passwords are encrypted.

Niradhip Chakraborty · Answer

By defaultthe membership provider will hash the passwordsand since hashed password can't be recovered because hashing is a one way function you have to use Clear Text or Encrypted for the password format. To be able to get the password in clear text using MembershipUser.GetPassword method  you have to configure the membership provider to allow password retrieval. Then you can decided to use ClearText or Encrypted for the Password format in any case you will be able to get the user password using MembershipUser.GetPassword( http://msdn.microsoft.com/en-us/library/2x0c6sfa.aspx ) method. Please take a look at this example http://msdn.microsoft.com/en-us/library/system.web.security.membership.enablepasswordretrieval.aspx

r p · Answer

I am using CreateUserWizard for users to create their accounts. I don't use any encryption code. The encryption is done by CreateUserWizard. Thanks

Niradhip Chakraborty · Answer

He might have user Name and that will be unique you can write a query to get the password from table Something like. Select usn_vch_password from user where Usn_vch_UserId = ‘steve’; When you run this query you will get the password which is in encrypted now you need to decrypt it by using same logic what you have used in your code.