How It Works
By default, your passwords are stored in a hashed format in the database, which means they cannot
be retrieved. Hashing is an irreversible process that creates a unique fi ngerprint of your data. Because
it’s irreversible, there is no way to recreate the password from the hash, which makes it safer to store
in a database. When you log in, the password you enter is also hashed and then the two hashes are
compared to see if you are allowed to enter. Because the original password cannot be retrieved, the
PasswordRecovery control generates a new password for you. It then sends this password to the e-mail
address that is associated with the username you entered. As the mail body, it uses a standard template
that contains the username and the new password. To customize the mail body, you can point the
BodyFileName of the MailDefinition to a text file that contains placeholders for the username and
password, just as you saw how to do with the CreateUserWizard.