The ChangePassword.ChangingPassword event is raised before the membership provider specified in the ChangePassword.MembershipProvider property is called to change the password for a user account.
Use the ChangePassword.ChangingPassword event to perform any processing that is necessary before changing the password, such as checking the new password to make sure it is not in a list of common passwords. The new authorization token for the user is set after the ChangePassword.ChangingPassword event but before the ChangePassword.ChangedPassword event.
The ChangePassword.ChangingPassword event can be canceled by setting the LoginCancelEventArgs.Cancel property of the System.Web.UI.WebControls.LoginCancelEventArgs object to true if the event handler determines that the membership provider should not be called.
For more information about handling events, see Handling and Raising Events.