I was testing the forgot password link. I experienced a strange thing.
When I try to retrieve the password of normal user or admin user, I received an email informing me user's actual password. But when I try to retrieve the password of the host user, I received an email with the password shown as ******

Is this a bug in DNN or is there any setting in DNN that is hiding the password for the host user.?

I have tried this thing on DNN version 4.08.02 and 5.01.02. same thing happened for both of the cases.

 thanks for clarification.

if you have registration of your site enabled, you can create a new user with a known password. Next copy the password and the password salt of that user in the aspnet_membership table to the record of the host user. you can now logon with the new password of the host user

john mitchell created a tool to do something similar here: http://blogs.snapsis.com/PermaLink,guid,3078311e-6925-4c03-8243-d1b9c8a11906.aspx

DNN Blog | Twitter: @erikvb | LinkedIn: