Click here to Skip to main content
15,892,298 members
Please Sign up or sign in to vote.
1.00/5 (1 vote)
See more:
Dear guys,

I want to know how to password history from database and check in asp.net

check following critriea.

1) Password history should be set to 5 or more

2) Password should be case-sensitive.

3) Enforce password expiry including Minimum age and maximum age (min. age 1 & max. age 30 days) This can be changed on run-time.
Posted

1 solution

There is nothing built into .Net that will provide this information. You would have to write your own solution to create an audit trail of passwords but this would involve storing passwords

In fact, storing plain passwords is the worst approach in terms of security.

Administrator must not have access to plain passwords, this the reason of most of applications prompts you to create a new one, because passwords are hashed and hashing prevents from reverting to plain text.

If you need to track passwords, you'll need to write a custom membership provider tracking them.
 
Share this answer
 
Comments
Sergey Alexandrovich Kryukov 6-Mar-12 0:10am    
Absolutely. Password history is a wrong idea from the very beginning. My 5.
--SA

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900