I was testing the forgot password link. I experienced a strange thing.
When I try to retrieve the password of normal user or admin user, I received an email informing me user's actual password. But when I try to retrieve the password of the host user, I received an email with the password shown as ******

Is this a bug in DNN or is there any setting in DNN that is hiding the password for the host user.?

I have tried this thing on DNN version 4.08.02 and 5.01.02. same thing happened for both of the cases.

DotNetNuke isn't going to send the host's password in an email. It's a security issue.

(I think that the design should be changed so that it tells you that, rather than seding ******.)