Forgot Password Screen

Password Recovery in asp.net

in forgot password

add a textbox to input userid or email
which should be uniqre in our database

add a column "passwdresetKey" in our user table

when user input his userid or emailid
then check user or email existance in our database
if it exist then
create a guid string as a passwdresetKey and update it in database
(guid string should also unique)

and create a link of reset password page with query string value of passwdresetKey
(you can add userid also with second query variable)

and send it mail to user
(you can encrypt query string for security purpose)

when user click on this

our reset password page check guid and user id if ...

if it correct then show two textbox for new password and confirm password that user can change password

update password with old and update passwdresetKey as blank

this is the process you can follow