I recently installed silverstripe on one of my web servers and intend to use it as the backend for my company's redesigned website. I'm embarrassed to admit it, but I've now forgotten the password I used when I initially set it up. When I use the "Remember Password" form I don't receive the reset password email. I believe this is because I have yet to configure the email settings with the admin interface. Is there ANY other way to recover my password? It's SHA1 encrypted in the database (as it should be). Please let me know if you have any thoughts--I've shot myself in the foot here and will take any help I can get. Thanks.

-Mac

Quickest thing to do would probably be to manually overwrite your password in your database.

Just update the user row with the SHA1'ed password - you could use this tool to generate it.

Actually, the password is salted, so not that easy.

If you only have one user (or you don't mind adding your users back), delete all members (SQL: DELETE FROM MEMBER;) then run:

http://example.com/dev/build?username=admin&password=password

...to set a new admin user and password.

Or you could set a default login, by adding Security::setDefaultAdmin('username', 'password'); to mysite/_config.php.

Then you can log in, and change your password. You may want to remove the default login (by removing the line) afterwards.

The other thing that you can do in the database is to find your admin user's entry in the member table, and make the following changes:

* set the Password field to your unencrypted password
* set the PasswordEncryption field to 'none'

After you've done this, you can log in and change the password, and it will be overwritten with an encrypted password.

Thanks for all the great answers! I'm all set now.

Cheers,
Mac

I've written one of the techniques up at:
http://doc.silverstripe.com/doku.php?id=recovering_password

So you can follow those easy instructions.

@happykaka: This issue was all about the SilverStripe CMS and not how to unlock a Windows Account Password... Posts like yours are considered SPAM in my book.