Solved

asp.net membership question - Hashed passwords cannot be decoded.

Posted on 2011-02-11
1
2,796 Views
1 Endorsement
Last Modified: 2012-05-11
I'm trying to retrieve user passwords for an admin page.  Apparently I've been using hashed passwords.  I'm developing a low security, friendly site, so I don't give a rip about how secure it is.  I read that I need to change my password format.  I tried this by adding passwordFormat="true" in my web.config, but I still get the 'Hashed passwords cannot be decoded.' error on this line:
Line 180:        MembershipUtil.Password = Membership.Provider.GetPassword(MembershipUtil.Username, String.Empty);

Please advise.  Thanks -
1
Comment
Question by:JT_SIRO
1 Comment
 
LVL 14

Accepted Solution

by:
quizwedge earned 250 total points
ID: 34875770
Your existing users have hashed passwords, so you can't decode them. I found the following response at https://jcbauza.com/forums/p/1076/1270.aspx (though their SSL certificate has expired, so you'll probably get an error)

After a while we discovered what the problem was. The users were created originally by the application using a hashed password. This became an issue as a user with a hash password cannot be migrated automatically to the new encryption setting. So, even though your application is using encryption for the passwords, previously created users will face the issues mentioned before. What we ended up doing was deleting the existing users and creating new ones with the new settings on Web.Config. You could also reset the users and modify a column in the database if deleting them is not an option.
2

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Suggested Solutions

This article is for Object-Oriented Programming (OOP) beginners. An Interface contains declarations of events, indexers, methods and/or properties. Any class which implements the Interface should provide the concrete implementation for each Inter…
Performance in games development is paramount: every microsecond counts to be able to do everything in less than 33ms (aiming at 16ms). C# foreach statement is one of the worst performance killers, and here I explain why.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now