get users password and email it in asp.net mvc

Question

Im using an asp.net mvc 3 project. I want to be able to email a users password to them if they submit their username in RecoverPassword page.

How can i do that?

Thanks

Telanor · Accepted Answer · 2010-12-24 19:33:49Z

2

Its best to store the password in your database as a hash so it can never be reversed. If they forget their password, best thing to do is let them reset it, rather than telling them what the old one is.

answered Dec 24, 2010 at 19:33

Telanor

4,4396 gold badges31 silver badges37 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

raklos Over a year ago

this would require them to have a secret question/answer right? I want to avoid them needing to enter secret Q/A.

Telanor Over a year ago

Not necessarily. You can make it as simple as entering their username into a form, which then fetches their saved email and emails them a link. They click the link, containing a unique ID, which brings them to a page where they enter a new password.

John Farrell · Accepted Answer · 2010-12-24 19:23:17Z

1

Don't do that. Storing passwords in plain text is insecure.

answered Dec 24, 2010 at 19:23

John Farrell

24.7k10 gold badges82 silver badges112 bronze badges

2 Comments

raklos Over a year ago

would i be able to store it encrypted but send it decrypted in the email?

Andrew Coleson Over a year ago

@raklos: No. Firstly, email is (generally) insecure. Secondly, if you can decrypt it, that means you're storing the key somewhere, likely in the same place you're storing the encrypted passwords. Passwords should always be one-way hashed, never encrypted.

Collectives™ on Stack Overflow

get users password and email it in asp.net mvc

2 Answers 2

2 Comments

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related