This module is a single-use per DotNetNuke installation utility module that will make a number of security enhancing modifications to your "out of the box" DotNetNuke installation.  The following items are modified by the module in a structured, safe manner.

  1. Machine Keys are Updated - To ensure any previous breach doesn't allow users to still create encrypted values.
  2. User Passwords are converted from Encrypted -> Hashed.  This improves the security of the passwords by not allowing them to be retreived.
  3. Updates the web.config to disable "Password Retreival" and sets up the system to send the user a random password in the situation where they have forgotten their password.

Using this process you can easily update your installation and all users within the installation following the simple two phase approach that we have completely documented.

Although this module has been extensively tested, we want to be 100% sure that users understand all risks associated with the use of the module, therefore at this time rather than providing a direct download link to the module we request that you download the Administrators Guide, review the needs, functionality, and process and then e-mail Mitchel Sellers at msellers@iowacomputergurus.com for access to the download link.

We would like to extend a thank you to Shaun Walker and DotNetNuke Corporation for a bit of assistance with the process to complete the reset process.

Collapse All Expand All

Initial module release to the public.

Please select a file to download from the list below. Items marked with an * require agreement to the terms and conditions prior to selecting "Download".


 

If you find this module helpful, donations are appreciated to assist with the continued development of the module.

 

Click to verify BBB accreditation and to see a BBB report.

 

Microsoft Certified Partner

 

DNN and DotNetNuke are registered trademarks of DotNetNuke Corporation