Change User Password in ASP.NET Forms Authentication

Question

I code in C# (ASP.NET) and am using Forms authentication.
I would like to know which is the best method to change a user password without using the asp:ChangePassword control.
I dont want to use the reset password method.
I just want to grab the password i have inside my textbox and replace it with my older password.
Please note that the PasswordFormat I use is passwordFormat="Hashed"
Some code snippets would be helpful

Edit:

In my web.config, I have set enablePasswordRetrieval="false"
I used the following method

var myUser = Membership.GetUser(userID);
bool isChangeSuccess = myUser.ChangePassword(
    myUser.GetPassword(),
    ActivateUserPasswordText.Text.Trim());

It gives me the error,

This Membership Provider has not been configured to support password retrieval.

What could be done to solve these issues? I would really like my PasswordFormat to be hash itself.

Regards,
Naveen Jose

halfer · Accepted Answer · 2025-09-19 20:17:24Z

18

Got it solved. Thanks to my fellow developer.

var myUser = Membership.GetUser(userID);
bool isChangeSuccess = myUser.ChangePassword(
    myUser.ResetPassword(),
    ActivateUserPasswordText.Text.Trim());

Can't say I liked it much though. I thought ResetPassword() would be returning a bool.

edited Sep 19 at 20:17

halfer

20.2k20 gold badges110 silver badges207 bronze badges

answered Jun 11, 2010 at 7:30

codeandcloud

55.5k47 gold badges169 silver badges259 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

JP Hellemons Over a year ago

It returns a string with a random generated new password msdn.microsoft.com/en-us/library/…

codeandcloud Over a year ago

@JPHellemons: I said I thought :)

leppie · Accepted Answer · 2010-06-10 04:30:11Z

3

Assuming you are using the ASP.NET security thingies.

System.Web.Security.MembershipProvider.ChangePassword method

answered Jun 10, 2010 at 4:30

leppie

118k18 gold badges201 silver badges300 bronze badges

Comments

Nimesh Madhavan · Accepted Answer · 2010-06-10 06:26:54Z

2

Only the Hash value for the passwords are usually stored by the asp.net membership provider, so it is not possible to retrieve the original password. It is possible to change this behavior by configuration, but it is not recommended.
Simply ask the user to enter the old password also while changing the password. You can use the old password entered by the user in the User.ChangePassword method and it should work fine.

answered Jun 10, 2010 at 6:26

Nimesh Madhavan

6,3287 gold badges48 silver badges55 bronze badges

1 Comment

codeandcloud Over a year ago

My intention was to create a retrieve password for lost passwords

DileepKumar · Accepted Answer · 2012-04-03 07:24:08Z

1

This Membership Provider has not been configured to support password retrieval.

The above message is displayed because of your password format will be salt and so that you can't get the password of the user. If you want to do this change the password format and try again.

answered Apr 3, 2012 at 7:24

DileepKumar

521 silver badge6 bronze badges

1 Comment

codeandcloud Over a year ago

thanks dileep. i was more curious on how to retrieve the old password and ChangePassword does require old password as its parameter.

Dave Friedel · Accepted Answer · 2014-03-12 01:45:05Z

1

On the off chance someone is using the ApplicationUser and not the Membership - as I was because I did not want to set a Membership Provider - you can change the password this way:

            Dim manager = New UserManager()
            Dim userChange As ApplicationUser = manager.FindById(IDUser)

            userChange.PasswordHash = manager.PasswordHasher.HashPassword(newPassword.Value)
            Dim val As Object = manager.Update(userChange)

Hope this helps someone

answered Mar 12, 2014 at 1:45

Dave Friedel

1,0881 gold badge14 silver badges21 bronze badges

Collectives™ on Stack Overflow

Change User Password in ASP.NET Forms Authentication

5 Answers 5

2 Comments

Comments

1 Comment

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

5 Answers 5

2 Comments

Comments

1 Comment

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related