ASP.NET in a Nutshell

Name

FormsAuthPasswordFormat

Synopsis

This enumeration specifies the format that ASP.NET uses for encrypting passwords (if you are using Forms Authentication and the System.Web.Security.FormsAuthenticationModule). It is not used in ASP.NET code, but in the web.config file by the passwordFormat attribute in the <credentials> element (for example, <credentials passwordFormat="Clear">). When using any format other than clear, the user’s password is hashed with an appropriate algorithm and compared to the value stored in the web.config file each time authentication is performed. No matter what encryption you use for the password, usernames will still be transmitted in clear text.

Public Enum FormsAuthPasswordFormat
                  Clear = 0
                  SHA1 = 1
                  MD5 = 2
End Enum

Hierarchy

System.Object→System.ValueType→ System.Enum(System.IComparable, System.IFormattable, System.IConvertible)→ FormsAuthPasswordFormat