title: Alternative to DpapiDataProtectionProvider in ASP.NET Identity which does not use Machine Key
body: <p>I am looking for an alternative to DpapiDataProtectionProvider because this uses machine key and a user requests to reset the password from other application rather than the main MVC product, the token is always invalid.</p>
  <p>I have got an ASP.net MVC application and an API application. They are both using the same token provider  passwords like this:</p>
  <pre><code>var provider = new DpapiDataProtectionProvider(&quot;MyWeb&quot;);
          appManager.UserTokenProvider = new DataProtectorTokenProvider&lt;ApplicationUser&gt;(provider.Create(&quot;MyWebToken&quot;));
  </code></pre>
  <p>DpapiDataProtectionProvider relies on machine key, so the token is invalid when using a link from an email. What alternative could I use?</p>
  <p>Thanks</p>