MembershipProvider.ResetPassword Method (String, String)


The .NET API Reference documentation has a new home. Visit the .NET API Browser on to see the new experience.

Resets a user's password to a new, automatically generated password.

Namespace:   System.Web.Security
Assembly:  System.Web.ApplicationServices (in System.Web.ApplicationServices.dll)

public abstract string ResetPassword(
	string username,
	string answer


Type: System.String

The user to reset the password for.

Type: System.String

The password answer for the specified user.

Return Value

Type: System.String

The new password for the specified user.

Takes, as input, a user name and a password answer and generates a new, random password for the specified user.


The random password created by the ResetPassword method is not guaranteed to pass the regular expression in the PasswordStrengthRegularExpression property. However, the random password will meet the criteria established by the MinRequiredPasswordLength and MinRequiredNonAlphanumericCharacters properties

The ResetPassword method updates the user information in the data source with the new password value and returns the new password as a string. A convenient mechanism for generating a random password is the GeneratePassword method.

ResetPassword ensures that the EnablePasswordReset flag is set to true before performing any action. If EnablePasswordReset is false, a NotSupportedException exception is thrown.

ResetPassword also checks the value of the RequiresQuestionAndAnswer property. If RequiresQuestionAndAnswer is true, ResetPassword checks the value of the supplied answer parameter against the stored password answer in the data source. If they do not match, a MembershipPasswordException exception is thrown.

For an example of a MembershipProvider implementation, see Implementing a Profile Provider.

.NET Framework
Available since 2.0
Return to top