Take a look into the Umbraco Membership Provider:

   public string EncodePassword(string password)
        {
            string encodedPassword = password;
            switch (PasswordFormat)
            {
                case MembershipPasswordFormat.Clear:
                    break;
                case MembershipPasswordFormat.Encrypted:
                    encodedPassword =
                      Convert.ToBase64String(EncryptPassword(Encoding.Unicode.GetBytes(password)));
                    break;
                case MembershipPasswordFormat.Hashed:
                    HMACSHA1 hash = new HMACSHA1();
                    hash.Key = Encoding.Unicode.GetBytes(password);
                    encodedPassword =
                      Convert.ToBase64String(hash.ComputeHash(Encoding.Unicode.GetBytes(password)));
                    break;
                default:
                    throw new ProviderException("Unsupported password format.");
            }
            return encodedPassword;
        }

There is also a function called GetPassword and UnEncodePassword and EncodePassword

hth, Thomas

Thomas - how do I access these methods in the code? When I put in "umbraco.providers.members.UmbracoMembershipProvider" - I can't see any methods. Is this the correct way to access the methods?

I should have mentioned that I'm using Umbraco 4.0, does this change anything?

Thanks!

v4 is the same code as v4.5 so it should work. To get acces to the actual membershipProvider you can use System.Web.Security.Membership. It also has a Property called Provider which gives you back the actual Provider. If this is set to the UmbracomembershipProvider you shuold be able to cast it like :

((providers.members.UmbracoMembershipProvider)System.Web.Security.Membership.Provider).EncodePassord();

didn't tested it yet, but it should do it. The disadvantage is that this will only work with the umbraco Membership provider...

hth, Thomas

Thanks for that Thomas - now I can access the method but its throwing the exception "Cannot unencode a hashed password". Do you know if there is a way to unencode a hashed password?

Thanks very much for your help Thomas, I have now changed the config so that the password format is 'clear' and I can now display the password. Thanks again - this is a great community.

is working on a reply...