In my asp.net web application, i have following scenario.
If the user forgets the password. Secret answer for the secret question used when registering.
What is the other way and secure way to allow the users login.
User knows userid for sure.
There is no email address involved.
...
Go to the complete details ...