That's what I was trying to get by with, but my client insisted big time that they need those passwords, that they own them, etc., I almost ended up loosing the client (!), but reacted in time and told them I'll get it done...

I researched some, and I have located a publication of the Federal Information Processing Standards entitled Specifications for Password Usage that spells out ownership of passwords. There are two types of passwords - Personal Passwords, which are the property of the user, and Access Passwords, which are the property of the entity that owns information that the user is obtaining access to. The link is www.ifl.nist.gov/fipspubs/fip112.htm.  The specific section is 3. Acceptable Basic Criteria - 3.5 Ownership.

I am using 'Encrypted' for the encryption method in the web.config file.

I have managed to figure it out, and used UserController.GetPassword(info, ""), where info is DotNetNuke.Entities.Users.UserInfo, and "" is the Password Answer; since I do not have set up the password question/answer option, the pasword answerr is going to be an empty string anyhow.

Still I don't have a clue why there is no override function requiring only UserInfo without password answer.... and why DotNetNuke.Entities.Users.UserInfo.Membership.Password is returning an empty string?!?

Waldis