Email Encrypted Password

I used Security Assist to set up my login system using I think it was SHA1. Anyway when the user forgets their password and clicks the email password link then it emails them the long encrypted password instead of their actual password. How do you send them the unencrypted password?

on the email password page, double click the email Password server behavior.

on the final step, you can change the contents of the email body, Remove the Password database reference, then click the plus button and select the newPW session variable.

I tried that but there wasn't a password session variable listed.

if you followed the tutorial, you added a set session value server behavior to the page to contain the random password. In the tutorial, this session is created with the name "NewPW".

What name did you use? Was it a different name? if so, then you need to select that session variable.

Do you have a link to the Security Assist tutorial you're referring to? I went to through the process again and didn't see where it allowed me to set a session variable for the password.

On the security assist support page:
securityassist/

look in the Solution recipes section, the "Updating Send Password" recipe has the instructions.