Decrypt or get Plain text from encrypted Password in MSSQL dB used by Asp.net membership provider

Question

1.00/5 (1 vote)

See more:

, +

I have a database in which user's password are stored as encrypted form using asp.net membership provider. here is the setting for membership in web.config

XML

<membership>
     <providers>
       <clear />
       <add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider" connectionStringName="ApplicationServices" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="false" requiresUniqueEmail="false" maxInvalidPasswordAttempts="5" minRequiredPasswordLength="6" minRequiredNonalphanumericCharacters="0" passwordAttemptWindow="10" applicationName="/" />
     </providers>
   </membership>

and the code for encryption is as

C#

System.Text.Encoding.Unicode.GetString(MembershipProvider.DecryptPassword(Convert.FromBase64String(encryptedPassword)));

The Main task is to transfer the mssql database to mysql database. but the problem is the password that are encrypted.

Posted 20-Oct-14 18:23pm

Muhammad Taqi Hassan Bukhari

Updated 20-Oct-14 21:08pm

v2

Add a Solution

Comments

Kornfeld Eliyahu Peter 21-Oct-14 3:02am

Hopefully password doesn't encrypted but stored as a one-way-hash - in which case you can not retrieve it!

Muhammad Taqi Hassan Bukhari 21-Oct-14 3:07am

I want to retrieve in plain text, so that i can put them back into mysql database through php encryption methods. I have searched on Google and found that if in the configuration file if it's setting is not set to hashed then it can be possible to decrypt it back.

Here is the code that membership using to encrypt the passwords. System.Text.Encoding.Unicode.GetString(MembershipProvider.DecryptPassword(Convert.FromBase64String(encryptedPassword)));

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

OriginalGriff · Answer 1 · 2014-10-20T21:10:00

Solution 1

We do not condone, support or assist in the production of malicious code in any way, form or manner. This is a professional site for professional developers.

And decrypting database passwords is almost certainly malicious: ask the owner / originator of the password what it is. You do have access to them, don't you?

Posted 20-Oct-14 21:10pm

OriginalGriff

Comments

Muhammad Taqi Hassan Bukhari 21-Oct-14 3:14am

actually the problem is that admin has forget his password in this application, and he also leaves the organization. there is no password recovery option in the product. only change password. but he didn't remember his password. and further more i have decided to move this on MySQL db. so i need to decrypt their password. other wise it is hurle to ask everyone come into the system and change their password.

OriginalGriff 21-Oct-14 3:30am

If your admin has left and you don't have the password, then you are stuffed.
It may be hassle to get the users to change their passwords, but it's your best option.

Muhammad Taqi Hassan Bukhari 21-Oct-14 3:47am

yes, but what about the admin password, because on admin module only he has the right to approve the new user's account request. and manage other functionalists and generating reports.