how is a password sent with PasswordRecovery?

  • Thread starter Thread starter Ben
  • Start date Start date
B

Ben

Hi,

when a password is sent to the user via email with the PasswordRecovery
control, is it sent in "clear" even if the password is hashed or encrypted?

Thanks
Ben
 
You can only use this if you have stored your passwords with the cleartext
option. Otherwise, normally only a hash is stored, and so you would need to
generate a new password for the user and email that to them.
Peter
 
Thanks for replying.
May i ask this:
1) The new generated hashed password sent to the mailadrress, is it sent in
"clear"?
2) if the passwordformat is encrypted, no passwordrecovery is then possible
or a new one must be generated ?

Thanks
 
Thanks.
The answer is:
1) yes
2) clear or encrypted: can be sent (both as cleartext); hashed: must be
reset (new pw).
 
Back
Top