PasswordRecovery

[Toot]

Hi again,

My password setup is hashed, enablepasswordretrieval=false and enablepasswordreset=true. The email sent out states the username and brand spangly new password. What is this password - is it the hashed version? The user that I've been playing around with can no longer login with the old pw, as expected, but equally can't use the new one.

What am I doing wrong?

Thanks for your help,
Toot

[stardv]

If you use password recovery control provided in ASP.NET 2.0 it will allow your users to enter their email address along with security questions if set in config and will sent them new password. The password received via email is not hashed, it is regular password that need to be copied and pasted into password box what will be hashed afterworlds. I know it looks hashed because it contains many different characters but it is not, make sure you copy and paste the whole password and provide correct user name