With ASP.NET membership API managing website security has become easy to implement yet it is powerful to support enterprise level authentication/authorization for any application.

Today we will leverage password reset capability of membership API to reset registered user's password by generating random password and sending it to his email which is registered with the account. [More]

One of the most common requirement related to website's user account security is to prompt for changing password after certain days (usually 90 days). This can be developed with the help of ASP.NET's Membership API.

Membership API already include last password change date as a part of database record and Membership User class provide a property to get that date for user from data store.

Today we will use Membership User class's LastPasswordChangedDate property to determine if user's last password change date was less than 90 days or not and if not then we will redirect user to change password page with message that his password was expired and he will need to change it. [More]

Asp.net Membership provide rich interface to implement security in your web application. There are many things you can do and even better if it doesn't fit your design then you can always extend it.

One such feature is locking user after certain number of failed attempt to login. This is great feature so today we will look at how we can provide a page from where admin can unlock the user who has been locked. [More]

Form Authentication provides a great feature to make AJAX calls to membership. This provide added benefit because you can use jQuery and CSS to build nice client side UI and still be able to leverage power of membership providers for user authentications and validations. Today we will implement User Authentication using JQuery and Membership Service (provided with Microsoft AJAX) to AJAXify our login page. Here is a quick look of final result: [More]