Learn More





Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Unable to reset passwrodsUnable to reset passwrods
New Post
7/10/2015 12:48 PM

I have a DNN site running DNN 7.04.00 (353). I am not able to reset passwords on my site. If I utilize the built-in password reset functionality I can receive the password reset email with a link. I click the link, enter my email address and new password. No matter what I do I keep getting an error that states, "Your new password was not accepted for security reasons. Please make sure to choose a password which does not match a previously used password and which is long and complex enough to meet the sites password complexity requirements."

Here's what's weird about it, I am entering a strong password that has never been used before. When I do this, I can see the following things happen:

  • Password reset link is sent with password token. I can see this same token in the "Users" table.
  • I follow the link. Attempt to reset the password using a valid and not previously used password. No matter what, I receive the error above.
  • The Users.PasswordResetToken column value is reset. The Users.PasswordRestExpiration is set to null. This tells me that I've used the token and it is no longer valid.
  • Here's what's really strange... the aspnet_Membership.Password hash value is never changed... okay that makes since, I couldn't successfully change the password. However, I now have a new entry in the PasswordHistory table. The value here is hashed, however it looks like the reset password I entered was stored in the PasswordHistory table... the new password did not get stored in the aspnet_Membership table like I would expect.

No matter what my password isn't accepted, however it's stored in the PasswordHistory table. Does anyone have any idea what could cause this? A few notes that may help:

  • Users register for accounts on my site via a custom registration module, not the default DNN registration module.
  • In the DNN web.config I have the following settings
    • passwordStrengthRegularExpression is non-existent, I have removed this completely from web.config for troubleshooting.
    • enablePasswordReset is true
    • requireQuestionAndAnswer is true
    • passwordFormat is hashed
    • minRequiredPasswordLength is 8
    • minRequiredNonalphanumericCharacters is 1

​I'm using a brand new password which meets these requirements, for example "ChickEnHea%d", however no matter what I try the password is not accepted.

Thank you for your help.

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Unable to reset passwrodsUnable to reset passwrods

These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
Try Evoq
For Free
Start Free Trial
a Demo
See Evoq Live
Need More Information?