ASP.NET Membership - Change password without asking the old

19 Comments

• Thanks! I was trying to get the password via the user's Membership data, not realizing that it was looking for the clear text, not the hashed value stored in the database.
  

• You could also use the GetPassword() function instead of auto generating a new one. Not sure if this is a big deal or not, but just FYI:
  
  user.ChangePassword(user.GetPassword(), "NewPwHere")
  

• Jesse this works only if you store the password in an encrypted way and not in a hashed.
  

• Thanks a lot, great tip - I was just scratching my head how to change the password when it's stored as hashed.
  

• thank you so much. U've kicked me out of stuck.
  

• nice article
  

• Yet another thanks for an elegant, simple solution!
  

• easy and brilliance
  Thanx
  

• Great post, just what I was looking for.
  

• My site requires a Question and Answer, so I can't get past the Reset Password step without it. And, of course the Answer is hashed as well.
  
  Any ideas?
  

• I have the same problem as Richard has posted.
  
  I need to have the Question And Answer set True.
  
  I have tried to get around it and still could not figure it out.
  
  Thanks,
  

• Great stuff! :) Should put this on StackOverflow...
  

• Nice tip. Was just wondering on how an administrator could change a user's password.
  

• You've been kicked good ONE man!!! Works Perfect
  

• I use this trick a lot, but what about validation? If the new password is not valid, the user cannot log on anymore until you give a valid one. Is there ny way to vlidate the password strenght before doing the ResetPassword?
  

• MembershipUser user = Membership.GetUser();
  
  string genPasswrd = user.ResetPassword();
  
  //email user genPasswrd
  

• Yes there should realize the reader to RSS my feed to RSS commentary, quite simply
  

• I was trying to use aspnet_Membership_setPassword to change ASP.NET password, the new password that I input was clear text. When the password had been changed. it didn't work. Do have to encrypt the new password before I change it?
  

• MembershipUser u = Membership.FindUsersByName("username")["username"];
  u.UnlockUser();
  u.ChangePassword(u.ResetPassword("username"), "newpass");