Secure Password Recovery

IowaComputerGurus's Secure Password Recovery module is the next step in helping keep your users information secure within your DotNetNuke Portal.  Unlike the out of the box functionality of DotNetNuke, this module allows users to request a password reset.  The user is then sent an "Access Code", using this code they can return to the site and reset their password.  It is only at that time that the users password was actually changed.

Using this process provides a number of security benefits for users and portal administrators.

  1. Users passwords are never sent via e-mail using this process
  2. Users passwords are only changed after the user takes action from the e-mail.  By following this approach malicious attempts will not lock users out of their accounts.
  3. Users that forgot their username can still request resets via e-mail.

This module is being provided for free by IowaComputerGurus, with support from OurBond Inc during the development/testing process.

Version History

Collapse All Expand All
Click here to expand contentClick here to collapse content  Version 02.00.01 - January 31st, 2012
  • Improved source code documentation
  • Added configuration option to disable CAPTCHA for individuals with DNN instances where the core Captcha is non-usable
Click here to expand contentClick here to collapse content  Version 02.00.00 - October 12th, 2011

This release was a security focused release with many community contributions from Steven Webster of dnnOsphere.com. His changes/enhancements to the module were incorporated after a security review of the default functionality that was provided in the 1.x release. We would like to thank him for submitting these modifications for community use.

  • Enhanced security implementation to prevent spoofing of reset tokens.
  • Enhanced security implementation by adding CAPTCHA for bot bypassing
  • Other internal security enhancements.

 

Click here to expand contentClick here to collapse content  Version 01.00.02 - May 20th, 2011

Update to resolve missing localization keys for international users.

Click here to expand contentClick here to collapse content  Version 01.00.01 - May 10th, 2011

This release was the first release of the module to the DotNetNuke community.  Initial feature sets and documentation were completed for this release.

Downloads

Please select a file to download from the list below. Items marked with an * require agreement to the terms and conditions prior to selecting "Download".








 

If you find this module helpful, donations are appreciated to assist with the continued development of the module.

 

Click to verify BBB accreditation and to see a BBB report.

 

Microsoft Certified Partner

 

DNN and DotNetNuke are registered trademarks of DotNetNuke Corporation