Awesome

MvcAccount — Authentication and Account Management plugin for ASP.NET MVC

Note: Development of MvcAccount has ceased. See NoMVC.

MvcAccount is the simplest way to password-protect your ASP.NET MVC application. It consists of a single assembly which includes models, views, controllers, resources, etc. Add a bit of configuration and you are done!

See the documentation to get started.

Functions

Sign In/Out: With account lock out after max. invalid attempts.
Reset Password: Sends email with link to enter new password.
Change Password: User must sign in first.
Change Email: With optional verification (sends email with link).

Password encryption

None: Passwords are stored in clear text.
PBKDF2 (Recommended): Passwords are hashed with the RFC 2898 algorithm. Implemented by Crypto, also used by SimpleMembershipProvider.
SHA1: Passwords are encrypted one-way using the SHA1 hashing algorithm (implemented by SqlMembershipProvider).
MachineKey: Passwords are encrypted using the encryption settings determined by the machineKey element configuration (also implemented by SqlMembershipProvider).
Custom: Provide your own implementation.

Integration

MembershipProvider: Although MvcAccount is a substitute for MembershipProvider there are many components out there that work against this API, so MvcAccount also provides an implementation. The only functions currently implemented are:
- ValidateUser (useful if your application implements other functions that require username/password verification).
- GetUser (all overloads, this allows you to get user information from your application without a direct dependency on MvcAccount).
Bootstrap: Views use Bootstrap markup and classes (optional, you are not required to use Bootstrap).

Localization

MvcAccount is fully localized in the following languages:

English (en)
Spanish (es)
Finnish (fi)
Portuguese (pt)

Not included

MvcAccount doesn't provide the following functionality:

Anything related with roles or claims.
External login providers (OAuth, OpenID).