Export (0) Print
Expand All

SqlMembershipProvider.RequiresQuestionAndAnswer Property

Gets a value indicating whether the SQL Server membership provider is configured to require the user to answer a password question for password reset and retrieval.

Namespace:  System.Web.Security
Assembly:  System.Web (in System.Web.dll)

public override bool RequiresQuestionAndAnswer { get; }

Property Value

Type: System.Boolean
true if a password answer is required for password reset and retrieval; otherwise, false. The default is true.

Requiring a password question and answer provides an additional layer of security when retrieving or resetting a user's password. When creating a user name, a user can supply a question and answer that can later be used to retrieve or reset a forgotten password. If the EnablePasswordReset property and the EnablePasswordRetrieval property are both false, the value of the RequiresQuestionAndAnswer property is irrelevant.

For more information, see ResetPassword and GetPassword.

The following code example shows the membership element in the system.web section of the Web.config file for an ASP.NET application. It specifies the application's SqlMembershipProvider instance and configures it to require a password answer for password reset or retrieval.

<membership defaultProvider="SqlProvider" userIsOnlineTimeWindow="20">
  <providers>
    <add name="SqlProvider"
      type="System.Web.Security.SqlMembershipProvider"
      connectionStringName="SqlServices"
      enablePasswordRetrieval="false"
      enablePasswordReset="true"
      requiresQuestionAndAnswer="true"
      passwordFormat="Hashed"
      applicationName="MyApplication" />
  </providers>
</membership>

.NET Framework

Supported in: 4.6, 4.5, 4, 3.5, 3.0, 2.0
Show:
© 2015 Microsoft