How to decrypt a password of aspnetuser table

Question

I have taken an open source HRM in which there is a users created , I do not know the password and on the database i only see the hash i am not sure which hash aspnetuser (owin) is using how to see the password. that is my password hash "APWAh/SDKj9QFUhTXfxlU/u/o0PHTrH/anvF51TMSMoMSreuCs7hrZWbuaNDYKG6gg==" Thanks in advance

Jignesh Kumar · Answer

Hi Mark, While storing password which hashing technique used need to check and for getting password you need to apply decrypt using same technique.

Sachin Singh · Answer

check the default login method under account controller there you will find , how they compare stored password with entered psd.

Mark Tabor · Answer

I have a table with I generate these password using PBKDf2 online but still it says invalid password I change securityStamp with SALT value that might be the reason

Sachin Singh · Answer

Asp.Net Identity uses PBKDf2 ,you can check in github as they are open source Version 2: * PBKDF2 with HMAC-SHA1, 128-bit salt, 256-bit subkey, 1000 iterations. * (See also: SDL crypto guidelines v5.1, Part III) * Format: { 0x00, salt, subkey } * * Version 3: * PBKDF2 with HMAC-SHA256, 128-bit salt, 256-bit subkey, 10000 iterations. * Format: { 0x01, prf (UInt32), iter count (UInt32), salt length (UInt32), salt, subkey } * (All UInt32s are stored big-endian.) as , they are one way , you can't get the original password , you can only compare by hashing the entered password with the stored password.