The MultiView control in ASP.NET WebForms provides a native mechanism for rendering distinct content panels within a single page lifecycle. By managing the ActiveViewIndex property, developers can construct stateful, multi-step workflows without triggering full page redirects or losing posted data. This approach is particularly effective for credential recovery flows where sequential validation is required.

Markup Configuration

The interface consists of a parent MultiView container hosting three child View elements. Each view represents a distinct phase of the recovery process. The control initializes with the first panel visible by default.

<asp:MultiView ID="MvPasswordRecovery" runat="server" ActiveViewIndex="0">
    <asp:View ID="VwAccountEntry" runat="server">
        <h3>Phase 1: Account Identification</h3>
        <asp:TextBox ID="TbUsername" runat="server" placeholder="Enter username" />
        <asp:Button ID="BtnProceedToSecurity" runat="server" Text="Continue" OnClick="BtnProceedToSecurity_Click" />
        <asp:Label ID="LbAccountMsg" runat="server" ForeColor="Red" />
    </asp:View>

    <asp:View ID="VwSecurityQuestion" runat="server">
        <h3>Phase 2: Identity Verification</h3>
        <p>Challenge: <asp:Label ID="LbSecurityPrompt" runat="server" /></p>
        <p>Response: <asp:TextBox ID="TbSecurityResponse" runat="server" />
        <asp:Label ID="LbSecurityMsg" runat="server" ForeColor="Red" /></p>
        <asp:Button ID="BtnBackToAccount" runat="server" Text="Back" OnClick="BtnBackToAccount_Click" />
        <asp:Button ID="BtnProceedToReset" runat="server" Text="Next" OnClick="BtnProceedToReset_Click" />
    </asp:View>

    <asp:View ID="VwPasswordUpdate" runat="server">
        <h3>Phase 3: Credential Reset</h3>
        <p>New Credential: <asp:TextBox ID="TbNewPassword" runat="server" TextMode="Password" /></p>
        <p>Verify Credential: <asp:TextBox ID="TbConfirmPassword" runat="server" TextMode="Password" />
        <asp:Label ID="LbPasswordMsg" runat="server" ForeColor="Red" /></p>
        <asp:Button ID="BtnBackToSecurity" runat="server" Text="Back" OnClick="BtnBackToSecurity_Click" />
        <asp:Button ID="BtnFinalizeReset" runat="server" Text="Submit" OnClick="BtnFinalizeReset_Click" />
    </asp:View>
</asp:MultiView>

Explicitly setting the initial ActiveViewIndex prevents rendering conflicts during the initial page load.

Server-Side Navigation Logic

View transitions are handled by manipulating the ActiveViewIndex integer. Encapsulating index adjustments into dedicated methods improves maintainability and reduces redundant code across event handlers.

protected void BtnProceedToSecurity_Click(object sender, EventArgs e)
{
    ClearValidation(LbAccountMsg);
    string accountName = TbUsername.Text.Trim();
    var userEntity = DataAccessLayer.RetrieveByAccountName(accountName);

    if (userEntity == null)
    {
        DisplayError(LbAccountMsg, "The specified account does not exist.");
        return;
    }

    LbSecurityPrompt.Text = userEntity.SecurityQuestion;
    NavigateToNextView();
}

protected void BtnBackToAccount_Click(object sender, EventArgs e) => NavigateToPreviousView();

protected void BtnProceedToReset_Click(object sender, EventArgs e)
{
    ClearValidation(LbSecurityMsg);
    string currentQuestion = LbSecurityPrompt.Text;
    string providedAnswer = TbSecurityResponse.Text.Trim();

    var verifiedUser = DataAccessLayer.VerifySecurityResponse(currentQuestion, providedAnswer);
    if (verifiedUser == null)
    {
        DisplayError(LbSecurityMsg, "Verification failed. Please check your answer.");
        return;
    }

    NavigateToNextView();
}

protected void BtnBackToSecurity_Click(object sender, EventArgs e) => NavigateToPreviousView();

protected void BtnFinalizeReset_Click(object sender, EventArgs e)
{
    ClearValidation(LbPasswordMsg);
    if (!string.Equals(TbNewPassword.Text, TbConfirmPassword.Text, StringComparison.Ordinal))
    {
        DisplayError(LbPasswordMsg, "Credential confirmation does not match.");
        return;
    }

    string targetAccount = TbUsername.Text.Trim();
    var accountToUpdate = DataAccessLayer.RetrieveByAccountName(targetAccount);

    if (accountToUpdate != null)
    {
        accountToUpdate.PasswordHash = CryptographyHelper.GenerateHash(TbNewPassword.Text);
        DataAccessLayer.CommitChanges(accountToUpdate);

        string successScript = "alert('Recovery completed successfully.'); window.location.href='UserPortal.aspx';";
        Page.ClientScript.RegisterStartupScript(GetType(), "RecoveryComplete", successScript, true);
    }
}

private void NavigateToNextView()
{
    if (MvPasswordRecovery.ActiveViewIndex < MvPasswordRecovery.Views.Count - 1)
        MvPasswordRecovery.ActiveViewIndex++;
}

private void NavigateToPreviousView()
{
    if (MvPasswordRecovery.ActiveViewIndex > 0)
        MvPasswordRecovery.ActiveViewIndex--;
}

private void ClearValidation(Label target) { target.Text = string.Empty; }
private void DisplayError(Label target, string message) { target.Text = message; target.ForeColor = System.Drawing.Color.Crimson; }

The ActiveViewIndex property direct dictates which View element renders during the page lifecycle. Incrementing or decrementing this value triggers the control to hide the current panel and render the target panel, preserving all control state across the ViewState mechanism. Validation logic runs before any index modification, ensuring that users cannot bypass required steps. Final submission processes the password update, hashes the new credential, and executes a client-side redirect upon successful database persistence.