Can not find how to decrypt passwords

[vilrbn]

Hello,

I'm encrypting passwords using the FormsAuthentication Class:

Encrypt = FormsAuthentication.HashPasswordForStoringInConfigFile(Password, "SHA1&quot

I didn't find how to decrypt this password. The Decrypt method seems to be available only if there is a cookie but my users don't systematically have one. Even though, I tried to use Decrypt unsuccessfully.

 

[Craig0201]

Why would you want to decrypt a password?

You compare the input value hashed to the stored hash. Hence no need to decrypt. Also as it is a hash, it is a one-way function. You cannot decrypt it.

Craig

 

[vilrbn]

Everybody has access to my site. I'm managing login and pwds when the user goes to restricted pages.

The future admin of the site (not a developer) wants to be able to display and update them via a specific interface.

I'm storing them in the DB encrypted and wanted to decrypt each of them for a display.
If it's not possible to do this, I will try to encrypt using another method.

 

[Craig0201]

The admin may need to update them as in 'I've forgotten my password.' but never to show them. That would give the admin access as that user. Not secure! For example, an admin for this PC cannot see my login password but they can reset it.

There are algorithms to do this i.e. DES but I would advise HEAVILY against.

Craig

 

[vilrbn]

I agree with you.
I'll adapt my code not to show the password. Thanks for your advises !