I installed 4.3.5 at my hosting provider (DiscountASP.net), all went smooth. I logged into the admin account and changed the password, same for host. I used a password that I can type blindfolded, I know I got it right for both accounts. After logging out I tried to get back in as admin, no joy, bad password, try host, same deal. I know I sound like an idiot, but I *know* what the passwords are (and no I did not have CAPS LOCK on!) Has this happened to anyone else? email password isn't working either becasue I didn't even have a chance to configure SMTP.

Am I just screwed or is there some way to fix or reset the passwords?

Thanks in advance.

Funny, I just got done with cuttin-n-pasting the password and salt (whatever the hell that is) from a newly created user into the host and admin records exactly as described in the KB! Worked like a charm. I do appreciate you taking the time to answer though.

What I find troubling is that it happened at all. I am in and out of several hundred password protected environments evey week. I carry most of them in ny head and I *definately* know my own! I entered the same password for the host and admin account a total of 4 times.

A *great* security feature for DNN would be the abilty to specify the default host and admin passwords in web.config. That would eliminate the very vulnerable state that DNN is in the moment you install it. If the first thing you do after installing is log in as host and poke around before changing the password you are asking for trouble. Any shmo can log in using the default credentials (they are right on the page!), as admin or host and totally pimp your ride. I don't know if this happened to me or not, but I could easily see it happening.