Creating password recovery mechanisms in ASP.NET

Creating password recovery mechanisms in ASP.NET

I would like to know whether I can build challenge/response-based password recovery mechanism using the ASP.NET 2.0 version. Is there a factory of stubs which we need to implement or are there standard implementations provided?

    Requires Free Membership to View

    Login

    When you register, you'll receive targeted emails designed to keep you informed of the most relevant information on Agile development, application security, testing & QA, software requirements, and more.

    Hannah Smalltree, Editorial Director

    By submitting your registration information to SearchSoftwareQuality.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSoftwareQuality.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Fortunately, the ASP.NET Membership controls have this implemented out of the box. The CreateUserWizard control allows you to collect a password recovery question and answer from new users and the PasswordRecovery control allows you to display the question, verify the answer and email out the response.

Both of these controls rely on a membership provider. This means you can either use the providers available from ASP.NET 2.0, such as the SQL Server provider, or you can easily implement your own if you want to store your user information in an Oracle database or other data store that is not supported out of the box. For more information about the ASP.NET 2.0 membership provider, check out this article.

More information:

This was first published in January 2007

Back to top