The password that opens your router’s settings is not the one that joins a laptop to the Wi-Fi. It is usually short, usually generic, and on a great many routers still sitting at whatever the manufacturer shipped. Here is where to find it, in the order that costs you least.
- Start here
- The label on the router. Both passwords are on it.
- Then
- The documented default for that exact model and hardware revision.
- Changed and forgotten
- A factory reset, which costs you every other setting.
- Most common pair
admin/admin— 247 records across 108 makers.
1. Read the label
Turn the router over. Most manufacturers print both credentials there, within a couple of centimetres of each other, which is exactly why they get confused:
- Beside the network name or SSID — that is the wireless key, for joining devices.
- Labelled admin, settings, management or password on its own — that is the one that opens the settings pages.
Photograph the whole label rather than copying one line. Stickers fade, and you will want the other credential eventually. On newer kit it may be on a plastic pull-out card tucked into the casing instead.
2. Look up the documented default
If the label is gone or illegible, the manufacturer’s documented default is public information. We hold 1,677 confirmed credentials across 460 manufacturers, sourced from vendor documentation rather than scraped from other lists.
Match on the exact model and, where it exists, the hardware revision — printed as H/W Ver or Rev. A D-Link DIR-615 rev A and rev E are different devices wearing the same model number.
Start from the manufacturer index, or go straight to the common ones: NETGEAR, TP-Link, ASUS, Linksys, D-Link and Cisco.
3. Know when there is no default to find
A growing share of equipment ships with no admin password at all. Instead the first visit to the settings page makes you create one. Current TP-Link Archer and Deco models work this way, as do Hikvision cameras, most ASUS routers on recent firmware, and nearly everything sold in the UK since the PSTI rules took effect.
Of our records, 78 describe a credential you create at first boot and 58 are unique to the individual unit. If the router is asking you to set a password rather than enter one, nothing has gone wrong — you are being handed the decision, and no list will help.
Per-unit passwords look like defaults but are not
HPE iLO, QNAP NAS units and a good deal of ISP-supplied kit print a password unique to that serial number. A factory reset restores that string, not a generic one, so the label is the only source.
4. The reset, and what it costs
If the password has been changed and nobody remembers it, a factory reset is usually the only route back. On a home router that is a minor inconvenience. On anything configured it is not.
Hold the recessed reset button with a paperclip for the interval your manufacturer specifies — commonly seven to fifteen seconds — with the power on, then wait a couple of minutes for the reboot.
What you lose: the wireless name and key, port forwarding, static leases, parental controls, DNS settings, VLANs, and on ISP hubs sometimes the broadband credentials themselves. On managed switches and firewalls you lose the entire configuration, which is why some vendors offer a recovery route that preserves it and others do not.
5. When a reset is the wrong answer
On enterprise equipment there is usually a better option, and reaching for the reset button destroys work that did not need destroying.
- Console access. Most managed switches and routers expose a serial console that offers password recovery with the configuration intact. Our guide to getting a serial console covers the cable and settings.
- Vendor challenge-response. Some manufacturers will issue a signed unlock code against the serial number and proof of ownership. Slow, but non-destructive.
- The management account. On kit adopted by a controller — Omada, UniFi, Meraki, an Omada or Aruba stack — the credentials come from the controller, not the device.
The full decision tree is in every way back into a device you have no password for, ordered from least destructive to most.
Once you are in
If the password that worked was the factory one, change it before you do anything else. Our own data is the argument: admin / admin alone appears on 247 records from 108 different manufacturers, and 29 of the 60 credential pairs in the 2016 Mirai botnet are still documented defaults today.
- Set a password unique to this device. Not the Wi-Fi key, and not one reused from anywhere else.
- Turn off remote management unless you genuinely need it — see what happens when a default password faces the internet.
- Check for firmware updates while you are in there. The same models that ship weak defaults tend to ship unpatched.
And if it was the wireless key you wanted all along, that is a different job.
