Gets a value indicating whether the SQL Server membership provider is configured to require the user to answer a password question for password reset and retrieval.
Assembly: System.Web (in System.Web.dll)
Requiring a password question and answer provides an additional layer of security when retrieving or resetting a user's password. When creating a user name, a user can supply a question and answer that can later be used to retrieve or reset a forgotten password. If the EnablePasswordReset property and the EnablePasswordRetrieval property are both false, the value of the property is irrelevant.
The following code example shows the element in the system.web section of the Web.config file for an ASP.NET application. It specifies the application's SqlMembershipProvider instance and configures it to require a password answer for password reset or retrieval.
<membership defaultProvider="SqlProvider" userIsOnlineTimeWindow="20"> <providers> <add name="SqlProvider" type="System.Web.Security.SqlMembershipProvider" connectionStringName="SqlServices" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="true" passwordFormat="Hashed" applicationName="MyApplication" /> </providers> </membership>
Available since 2.0