I forgot my Sitecore admin password and was thinking a way to reset from database level.

Is there a SQL query to reset Sitecore admin password ?

  • Łukasz Skowroński's answer works great. Cheers mate
    – DeeVade
    Commented Mar 4, 2018 at 11:29

5 Answers 5


The accepted answer is valid for previous version of Sitecore, but it does not reset the password salt and doesn't in fact reset the password to 'b'. In order to do this, you need the following script (which also will unlock the admin user if locked):

    [IsApproved] = '1', 
    [IsLockedOut] = '0'
    UserId IN (
        SELECT UserId FROM dbo.aspnet_Users WHERE UserName = 'sitecore\Admin'
  • 2
    This worked on Sitecore 8 Update 1, thanks! Commented May 24, 2018 at 17:59
  • 3
    Worked on Sitecore 9.0.1 as well
    – OriolBG
    Commented Jul 11, 2018 at 14:53
  • 2
    This answer is better as opposed to the accepted answer, as it resets the salt as well. When changing salts, passwords and hashing algorithms and moving back to SHA1 (in case of experimenting), this approach does the job correctly
    – Bas Lijten
    Commented Jul 19, 2018 at 7:35
  • 6
    Worked on 9.1 too
    – Andi AR
    Commented Jan 31, 2019 at 18:47
  • 2
    Worked on 9.3 too
    – jrap
    Commented Apr 22, 2021 at 17:42

Yes there is.

Switch to your core database and execute the SQL below to reset the password to b:

UPDATE [aspnet_Membership] SET Password='qOvF8m8F2IcWMvfOBjJYHmfLABc=' 
WHERE UserId IN (SELECT UserId FROM [aspnet_Users] WHERE UserName = 'sitecore\Admin')

Alternatively navigate to /sitecore/admin/unlock_admin.aspx and click Unlock Administrator. For this to work, you must first "unlock" the functionality. Open up the .aspx file and modify the following code:

// TODO: to enable the page, set enableUnlockButton = true;
private bool enableUnlockButton = false;

enter image description here

  • 1
    So you reset the password, but that's the salted / encrypted version, right? What would this new password be? admin / b ?
    – Laver
    Commented Oct 3, 2016 at 22:08
  • 2
    Yes, it gets reset to "factory default". b.
    – Mark Cassidy
    Commented Oct 3, 2016 at 22:08
  • Somewhere in the process of changing the hashing algorithm from SHA1 to SHA512 I broke the password. I used the alternative solution along with the code from sitecore.stackexchange.com/a/2672/95 to unlock and reset to a specific password. Commented Sep 10, 2020 at 1:49

Unlock_Admin doesn't work when you will decide to change your password encryption from SHA1 into SHA512 (regarding to Sitecore recommendations). It does NOT reset password for Sitecore admin - it just unlock the Sitecore account - as the name of method says. Here you have got a code of this method:

public override bool UnlockUser(string username)
  this._api.CheckParameter(ref username, true, true, true, this._api.UserNameLength, "username");
  ID applicationId = this.GetApplicationID(this.ApplicationName, false);
  if ((object) applicationId == null || applicationId == ID.Null)
    return false;
  SqlMembershipUser userByName = this._api.GetUserByName(username, applicationId);
  if (userByName == null)
    return false;
  return userByName.Unlock();

To reset the password you need to change code inside unlock_admin.aspx file which you will find in path:


Just replace:



var user = Membership.GetUser("sitecore\\admin");
user.ChangePassword(user.ResetPassword(), "b");

Additionally you can put this file directly in the webroot if you can not access it in default location - remember to delete it later.

  • Excellent, this worked for me as i have an instance that has been upgraded to SHA512
    – JGilmartin
    Commented Jan 21, 2018 at 14:24
  • 1
    This works for Sitecore 9.1.1 as well. Note that you should reference the \Config\production\Sitecore.IdentityServer.Host.xml config file to ensure the correct Core DB is being referenced. And since you are resetting the password anyway, might as well use something other than 'b' and use LastPass/BitLocker/1Password to address the efficiency issue of logging in.
    – Sirius_B
    Commented Jul 3, 2019 at 13:41

To get this to work with my version of Sitecore (8.1u3) after switching hashing algorithms to SHA512, I needed to make the following small adjustment to Derek's answer.

USE [sitecorecmsSitecore_Core];

    [IsApproved] = '1', 
    [IsLockedOut] = '0'
    UserId IN (
        SELECT UserId FROM dbo.aspnet_Users WHERE UserName = 'sitecore\admin'
  • This worked for me in Sitecore 9.1. Cheers! Commented Jun 22, 2021 at 21:21

It's not a SQL query, but this will work even when you switch HashingAlgorithms. You can create a small console application to reset/change passwords. I based this console app on the one from Bas Lijten on Github.

public class Program
    public static void Main(string[] args)
        var userName = args[0];
        var password = args[1];
        var user = Membership.GetUser(userName, false);
        var oldPassword = user.ResetPassword();
        user.ChangePassword(oldPassword, password);

You can then use it in the command line like this.

ResetPassword.exe "sitecore\admin" b

I'm switching to a different Hashing algorithm, and when you change the HashAlgorithm both in Sitecore and in your console app config, it just works. Here's the app.config

<?xml version="1.0" encoding="utf-8" ?>
      <supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.6.1" />
    <add name="core" connectionString="connectionstringtocoredb" providerName="System.Data.SqlClient"/>
    <membership defaultProvider="sql" hashAlgorithmType="SHA512">
        <clear />
        <add name="sql" type="System.Web.Security.SqlMembershipProvider" connectionStringName="core" applicationName="sitecore" minRequiredPasswordLength="1" minRequiredNonalphanumericCharacters="0" requiresQuestionAndAnswer="false" requiresUniqueEmail="false" maxInvalidPasswordAttempts="5" />

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.