Search code examples
asp.netasp.net-identity

How to change the machine key on ASP.NET production site and migrate encrypted passwords


I have currently the following problem, I'm using ASP Identity to handle Authentication, but it is showing me errors because of the XSRF token, one of the solutions is to setup a machinekey setting in web.config. I already have one set, but its from my development computer, so I think I need to generate a new one for my production environment, the problem is that if I change it my current users would not be able to login, I haven't found something yet on how to make this change, how to migrate encrypted passwords into a new machine key.


Solution

  • Machine key is not used for password hashing in Identity (v2 and v3)