I'd really second Steven's post above. I think it's generally a bad idea to be emailing passwords to anybody. Actually, DotNetNuke is changing their password templates and process to not do that anymore in 7.1 (I think). They are doing that specifically because it is highly insecure and broadcasts your site's insecurity.

I would approach the problem differently - how can you make it easier for people to reset their password when they need to - and the password reset module Steven gives is great for that.

Mike

Robert,

I also agree with Steve and Mike, and there has been a long-time discussion about Password security in DNN.

To make your client happy: What about suggesting him a "safer" way and convince him that the way he thinks is unsafe and hazardous? That should be what makes a worthy consultant - and in the end, a happier client.

Best wishes
Michael

---