Questions tagged [password-recovery]

The process of recovering passwords from data that have been stored or transmitted by a computer system.

In cryptanalysis and computer security, password recovery is the process of recovering passwords from data that have been stored in or transmitted by a computer system. A common approach is to repeatedly try guesses for the password. Another common approach is to say that you have "forgotten" the password and then change it.

The purpose of password recovery might be to help a user recover a forgotten password (though installing an entirely new password is less of a security risk, but involves system administration privileges), to gain unauthorized access to a system, or as a preventive measure by system administrators to check for easily recoverable passwords. On a file-by-file basis, password recovery is utilized to gain access to digital evidence for which a judge has allowed access but the particular file's access is restricted.

291 questions
135
votes
10 answers

RESTful password reset

What is the proper way to structure a RESTful resource for resetting a password? This resource is meant to be a password resetter for someone who has lost or forgotten their password. It invalidates their old password and e-mails them a…
Chris Dutrow
  • 48,402
  • 65
  • 188
  • 258
94
votes
5 answers

Recover SVN password from local cache

is there a way to recover a password from local cache? The password has to be stored somewhere because I can run svn co http://my.svn.server/foo but I've lost the password it self. Do I have to reset it or is it possible (and how) to find and…
Ondrej Skalicka
  • 3,046
  • 9
  • 32
  • 53
88
votes
14 answers

What is the default root pasword for MySQL 5.7

Cannot login to MySQL database after fresh install with root ID and empty/no password like other older MySQL versions do
Ryan
  • 3,085
  • 5
  • 27
  • 31
63
votes
12 answers

Implement password recovery best practice

I want to to implement password recovery in my web application. I'd like to avoid using secret questions. I could just send the password by e-mail but I think it would be risky. Maybe I could generate a new temporary random password and send it by…
Enrique
  • 9,920
  • 7
  • 47
  • 59
41
votes
7 answers

Chrome warning "[DOM] Password forms should have (optionally hidden) username fields for accessibility" in console even with hidden username field

When visiting the "reset password" route of my single-page app and looking at the Chrome browser console, I am greeted with the follwing warning: [DOM] Password forms should have (optionally hidden) username fields for accessibility: (More info:…
arne.b
  • 4,212
  • 2
  • 25
  • 44
36
votes
12 answers

PHP Forgot Password Function

I have a small community website and I need to implement some sort of forgotten password function. I currently store the passwords in the DB, encrypted with MD5. Is it possible to sort of 'decrypt' and send it to user via email or would I need to…
Liam
  • 9,725
  • 39
  • 111
  • 209
29
votes
2 answers

How do I implement password reset with ASP.NET Identity for ASP.NET MVC 5.0?

Microsoft is coming up with a new Membership system called ASP.NET Identity (also the default in ASP.NET MVC 5). I found the sample project, but this is not implemented a password reset. On password reset topic just found this Article: Implementing…
Gábor Plesz
  • 1,203
  • 1
  • 17
  • 28
22
votes
15 answers

after installing magento in my local machine I forgot admin password

after installing magento in my local machine I forgot admin password what I have given. I am not able to login to my admin area how can I reset the password I have read this article http://www.atwix.com/magento/reset-admin-password-mysql/ but it is…
Yavana
  • 411
  • 1
  • 4
  • 11
21
votes
6 answers

Implementing forgot password functionality in Java

I am currently implementing a forgot password function in a Java project. my methodology is, User clicks the forgot password link. In the forgot password page, system prompts the user to enter the email address he/she has registered in to the…
vigamage
  • 1,975
  • 7
  • 48
  • 74
21
votes
9 answers

Resetting ROOT password in MySQL 5.6

I have been following these instructions for resetting root password for local installation of MySQL 5.6 on Windows 7 laptop. I stopped the service, created init-file, and ran the following command (as Administrator): "C:\Program Files\MySQL\MySQL…
PM 77-1
  • 12,933
  • 21
  • 68
  • 111
20
votes
2 answers

How to configure confirmation email token lifespan in asp.net core mvc

I'm trying to extend the lifespan of both confirmation emails and password reset emails but I can't manage to do so. Currently I'm using Asp.net core 1.0.1 if that's helpful. Some tips or even better, the code, would be much appreciated. Thank you
18
votes
5 answers

Effective Techniques for Password Retrieval in Modern Web Applications

We've been working on web application where in we need to implement traditional web-apps functionality of password retrieval. According to the trends there are approaches like.. Sending Password reset link to user's email. Asking Secret Question to…
17
votes
6 answers

How to create a password reset method in Laravel when using the Database User Provider

I've been searching the internet and have yet to find a solution to the following problem... We currently have a website developed using Laravel which the user table is a remote Microsoft SQL database. The driver in config/auth.php has been set to…
short_coder
  • 183
  • 1
  • 1
  • 5
17
votes
3 answers

what is the best way to generate a reset token in python?

I'm trying to make a validation process for a password reset, what i've used are two values: the epoch time, and i want to use the users's old password (pbkdf2) as a key, Since i dont want to get non ASCII characters, i've used SimpleEncode library…
Abdelouahab Pp
  • 4,252
  • 11
  • 42
  • 65
16
votes
2 answers

Is there a way to break into a PostgreSQL database if you forgot the password?

I have a client that has a PostgreSQL database and he cannot remember the password that we used when the database was setup. Is there a way to recover that information so I do not have to blow away his database and start from scratch? The database…
Mark
  • 1,368
  • 5
  • 13
  • 26
1
2 3
19 20