Encrypt passwords in ASP.NET membership provider DB -


I have a legacy app that uses ASP.NET subscription provider w / SQL backend. The databases are set to clear the password. I want to encrypt these passwords while preserving personal passwords. How can I accomplish this?

I know that in order to recognize the change of ASP.NET, I have to change the database password format, password salt and password itself. To use encrypted password format, I also need to change the password format in ASP.NET configuration.

Basically, I have to implement the encryption for generating a password, catching a password, passwords, but I actually have lost my password encryption.

When you say that you want to encrypt these passwords, still personalized password protected By doing, I'm assuming that you mean that you do not want to change the user's password.

I recommend that you run a test on this (I 'm sure you will do anyway.)

SHA1 hashing for how this interior works Refer to.

  1. Create a small app to connect to the database and haveh all passwords.

  2. Update the configured for your application password (delete the "clear" instruction as the hijing default.


Comments

Post a Comment