Does anyone know if the cookie for automatic logon encrypts the password and username? Or is it stored in clear text and very easy get hold of, for anyone that uses the same computer.
//Seb
By default the cookie is both encrypted and uses data validation for protection. See the Microsoft ASP.NET documentation for the Protection attribute on the Forms tag.