I've decided my site needs the ability to retrieve existing passwords
without generating a new one. So I need to change passwordFormat from
"Hashed" to "Encrypted".

However, I'm not sure this is working. I tried setting it to "Encrypted"
(and also created a machineKey entry), but then my existing logins continued
to work and it seems like they shouldn't. So I then tried setting it to
"Clear". I'm still able to login but, when I examine the raw
aspnet_Membership table, I see the password fields are still unreadable.

Questions:

1. Is there something else I need to change to modify the way passwords are
stored?

2. Is there any way to do so without losing all my existing logins?

Thanks for any tips!

--
Jonathan Wood
SoftCircuits Programming
http://www.softcircuits.com

Guess I'm the only one who has done this.

Somehow, existing passwords still work if you change the passwordFormat.
However, functionality to change the password doesn't seem to, and so
accounts are best recreated after making the change.

--
Jonathan Wood
SoftCircuits Programming
http://www.softcircuits.com

"Jonathan Wood" <jwood [at] softcircuits.com> wrote in message
news:%238sZ1OGmIHA.3780 [at] TK2MSFTNGP06.phx.gbl...
> I've decided my site needs the ability to retrieve existing passwords
> without generating a new one. So I need to change passwordFormat from
> "Hashed" to "Encrypted".
>
> However, I'm not sure this is working. I tried setting it to "Encrypted"
> (and also created a machineKey entry), but then my existing logins
> continued to work and it seems like they shouldn't. So I then tried
> setting it to "Clear". I'm still able to login but, when I examine the raw
> aspnet_Membership table, I see the password fields are still unreadable.
>
> Questions:
>
> 1. Is there something else I need to change to modify the way passwords
> are stored?
>
> 2. Is there any way to do so without losing all my existing logins?
>
> Thanks for any tips!
>
> --
> Jonathan Wood
> SoftCircuits Programming
> http://www.softcircuits.com
>