The Cisco default password depends on what kind of Cisco device you have. Cisco Business switches and the Catalyst 1200 and 1300 use cisco / cisco, and make you change both the first time you log in. Enterprise IOS routers and switches have no default password at all: you set one up over the console port.
- Small business switches
cisco/cisco, changed at first login- Firewalls (Firepower, Threat Defense)
admin/Admin123, changed during setup- Enterprise IOS (Catalyst, ISR)
- No default. Configured from the console port.
- Meraki
- No local login. Managed from the Meraki cloud dashboard.
Which Cisco device do you have?
Each row below comes from Cisco’s own administration guide for that product. The full list, with a source link for every entry, is in the table further down.
| Device | How you log in | Default login |
|---|---|---|
| Cisco Business CBS250 / CBS350, Catalyst 1200 / 1300 switches | Browser | cisco / cisco, then you must change it |
| Small Business 300 / 350 / 500 / 550 managed switches | Browser or console | cisco / cisco |
| 1000 Series ISR (C1100, C1111) Day 0 web setup | Browser (HTTPS) | admin / default |
| ASA firewalls with ASDM, factory default | Browser (HTTPS) | Leave both fields blank |
| Firepower and Secure Firewall Threat Defense | Browser or SSH | admin / Admin123, changed at setup |
| UCS C-Series servers (Cisco IMC) | Browser or SSH | admin / password, must be changed |
| Aironet access points (autonomous IOS) | Browser or console | Cisco / Cisco, with a capital C |
| Cisco Business Wireless (CBW140AC, 240AC) | Setup wizard | None: the wizard creates it. Join the CiscoBusiness-Setup Wi-Fi with cisco123 to start. |
| SPA112 / SPA122 phone adapters | Browser | admin / admin |
| IP Phone 7800 / 8800 (multiplatform firmware) | Browser | None: you set one at first boot |
| Catalyst switches and ISR routers on IOS | Console cable, then CLI | None until someone sets one |
| Meraki | Cloud dashboard only | No local default |
Cisco default passwords by model
admin29 of 70 entriescisco9 of 70 entries| Model | Protocol | Access | Username | Password |
|---|---|---|---|---|
| 1 | TELNET | admin | admin | admin |
| 1000 SERIES ISR (C1100 / C1111, DAY 0 WEBUI) | HTTPS | Admin | admin | default |
| 2600 | TELNET | Admin | Administrator | admin |
| 3600 | TELNET | Guest | Administrator | admin |
| 3700 | TELNET | Admin | cisco | cisco |
| AIRONET | MULTI | Admin | leave blank | _Cisco |
| AIRONET | MULTI | Admin | Cisco | Cisco |
| AIRONET 1200 | HTTP | Admin | root | Cisco |
| AIRONET AUTONOMOUS AP (IOS-BASED, E.G. 1140/1600/2600/2700/3700) | MULTI | Admin | Cisco | Cisco |
| AP1200 Rev. IOS | MULTI | Admin | Cisco | Cisco |
| ARROWPOINT | — | Admin | admin | system |
| ASA (ALL MODELS) - PRIVILEGED EXEC (ENABLE) | CONSOLE | Enable | leave blank | no password set |
| ASA 5500-X / ASAV / ISA 3000 (ASDM, FACTORY DEFAULT) | HTTPS | Admin | leave blank | no password set |
| ASA 9.1(1) AND EARLIER - TELNET LOGIN PASSWORD | TELNET | User | leave blank | cisco |
| BBSD MSDE CLIENT Rev. 5.0 AND 5.1 | TELNET OR NAMED PIPES | database | bbsd-client | no password set |
| BBSM Rev. 5.0 AND 5.1 | TELNET OR NAMED PIPES | database | bbsd-client | changeme2 |
| BBSM ADMINISTRATOR Rev. 5.0 AND 5.1 | MULTI | Admin | Administrator | changeme |
| BBSM MSDE ADMINISTRATOR Rev. 5.0 AND 5.1 | IP AND NAMED PIPES | Admin | sa | no password set |
| BUSINESS CBS250 / CBS350 SERIES | HTTPS | Admin | cisco | cisco |
| CACHE ENGINE | CONSOLE | Admin | admin | diamond |
| CATALYST 1200 SERIES | HTTP | Admin | cisco | cisco |
| CATALYST 1300 SERIES | HTTP | Admin | cisco | cisco |
| CATALYST 4000/5000/6000 Rev. ALL | SNMP | RO/RW/RW+change SNMP config | leave blank | public/private/secret |
| CATALYST 9800 SERIES WIRELESS CONTROLLER (DAY 0 WEBUI) | HTTP | Admin | webui | unique to your unit |
| CISCO ATA-186 (VONAGE) | HTTP | Admin | leave blank | no password set |
| CISCO BUSINESS WIRELESS (CBW140AC / 145AC / 240AC) | HTTPS | Admin | you choose this on first boot | you create this on first boot |
| CISCO IMC CONFIGURATION UTILITY (F8 AT POST) | CONSOLE | Admin | admin | password |
| CISCOWORKS 2000 | — | Admin | admin | cisco |
| CISCOWORKS 2000 | — | User | guest | no password set |
| CISO AIRONET 1100 SERIES Rev. REV. 01 | HTTP | Admin | leave blank | Cisco |
| CNR Rev. ALL | CNR GUI | Admin | admin | changeme |
| CONFIGMAKER | — | Admin | cmaker | cmaker |
| CONTENT ENGINE | TELNET | Admin | admin | default |
| CVA 122 | TELNET | Admin | admin | admin |
| FIREPOWER 2100 (FXOS AND THREAT DEFENSE INITIAL SETUP) | SSH | Admin | admin | Admin123 |
| FIREPOWER DEVICE MANAGER (FDM) ON THREAT DEFENSE | HTTPS | Admin | admin | Admin123 |
| FXOS / FIREPOWER CHASSIS MANAGER (FIREPOWER 2100, PLATFORM MODE) | HTTPS | Admin | admin | Admin123 |
| GENERIC | — | — | no default | no password set |
| HSE | MULTI | Admin | hsa | hsadb |
| HSE | MULTI | Admin | root | blender |
| IP PHONE 7800 SERIES WITH MULTIPLATFORM FIRMWARE (7811, 7821, 7841, 7861) | HTTP | Admin | admin | you create this on first boot |
| IP PHONE 8800 SERIES WITH MULTIPLATFORM FIRMWARE (8811, 8841, 8851, 8861, 8865) | HTTP | Admin | admin | you create this on first boot |
| MOBILITY EXPRESS AP-BASED CONTROLLER (AIREOS SETUP WIZARD) | MULTI | Admin | you choose this on first boot | you create this on first boot |
| NETRANGER/SECURE IDS | MULTI | — | netrangr | attack |
| NETRANGER/SECURE IDS Rev. 3.0(5)S17 | MULTI | Admin | root | attack |
| NEXUS 9000 SERIES (NX-OS) | CONSOLE | Admin | admin | you create this on first boot |
| PIX FIREWALL | TELNET | User | leave blank | cisco |
| RTP300 W/2 PHONE PORTS Rev. 1.0 | HTTP | Admin | admin | admin |
| RTP300 W/2 PHONE PORTS Rev. 1.0 | HTTP | update access | user | tivonpw |
| SECURE FIREWALL / FIREPOWER MANAGEMENT CENTER (FMC) | HTTPS | Admin | admin | Admin123 |
| SECURE FIREWALL THREAT DEFENSE VIRTUAL ON AWS | SSH | Admin | admin | unique to your unit |
| SPA112 / SPA122 ANALOG TELEPHONE ADAPTER | HTTP | User | cisco | cisco |
| SPA112 / SPA122 ANALOG TELEPHONE ADAPTER (BUILT-IN IVR) | CONSOLE | Admin | leave blank | 1234# |
| SPA112 / SPA122 ANALOG TELEPHONE ADAPTER (SPA100 SERIES) | HTTP | Admin | admin | admin |
| SPA300 / SPA500 SERIES IP PHONES | HTTP | User | user | no password set |
| SPA300 / SPA500 SERIES IP PHONES (SPA301, 303, 501G, 502G, 504G, 508G, 509G, 512G, 514G, 525G) | HTTP | Admin | admin | no password set |
| SX300 / SX350 / SG350X / SX500 / SX550X SERIES MANAGED SWITCHES | CONSOLE | Admin | cisco | cisco |
| TANDBERG C20/C40/C60/C90 AND E20/EX60/EX90 ENDPOINTS ON SOFTWARE BEFORE TC4.0.0 | SSH | Root | root | no password set |
| TELEPRESENCE SX/MX/C-SERIES AND ROOM KIT ON TC AND OLDER CE SOFTWARE | HTTPS | Admin | admin | no password set |
| UCS 6200/6300/6400/6500 FABRIC INTERCONNECT - CONSOLE SETUP | CONSOLE | Admin | admin | you create this on first boot |
| UCS C-SERIES CIMC (CISCO IMC, C220/C240 M4-M7) | HTTPS | Admin | admin | password |
| UCS C-SERIES CIMC - SSH CLI | SSH | Admin | admin | password |
| UCS C-SERIES SHIPPED 17 NOV 2015 - 6 JAN 2016 (FN-64093) | HTTPS | Admin | admin | Cisco1234 |
| UCS MANAGER WEB INTERFACE | HTTPS | Admin | admin | you create this on first boot |
| UNIFIED COMMUNICATIONS MANAGER (CUCM) 14 / 15 AND IM&P | HTTPS | Admin | you choose this on first boot | you create this on first boot |
| VALET - M10 | — | — | admin | admin |
| VPN CONCENTRATOR 3000 SERIES Rev. 3 | MULTI | Admin | admin | admin |
| WEBEX ROOM / DESK / BOARD (ROOMOS) | HTTPS | Admin | admin | you create this on first boot |
| WLSE | MULTI | Admin | root | blender |
| WLSE | MULTI | Admin | wlse | wlsedb |
About Cisco
Cisco Systems is the largest networking vendor in the world, spanning routers, switches, firewalls and telephony. The Cisco records here run across the SPA-, Catalyst, Cisco, Aironet and ASA- lines.
Reaching the login page
The admin page on most Cisco units answers at http://192.168.1.1. If that address does not load, the router is whatever your computer lists as its default gateway — ipconfig on Windows or ipconfig getoption en0 router on a Mac will tell you.
IOS devices are configured over console or SSH rather than a web page, and most enterprise units have no factory web login at all. The entries here cover small-business gear, appliances and management software.
What the Cisco defaults look like
admin is the username on 29 of the 70 entries. 9 of them ask for no username at all. 11 of them shipped with no password at all.
Where one is set, cisco comes up most often, on 9 entries. There are 22 different passwords across the Cisco set, so check your exact model rather than assuming. 25 of them are reached over a protocol that puts the password on the wire in clear text, so work from a machine on the same wired network rather than across the internet, and change the password once you are in.
If the Cisco password has already been changed
There is a recessed reset button on the back or underneath that needs a straightened paperclip. Hold it in for thirty seconds with the unit powered on. Let go when the lights change pattern, and give it a couple of minutes to come back up.
A reset clears more than the password. The Wi-Fi name and key go back to what is printed on the label, port forwards and firewall rules are discarded, and any static addressing is lost. Photograph the settings pages first — it takes two minutes and saves an evening.
Small business web logins
The RV routers and Cisco Business switches answer in a browser, usually on 192.168.1.1, with some older units on 192.168.1.254. Current firmware forces a new password on the first login, so cisco / cisco works once on a new or reset unit and not after that. To get back to it, hold the Reset button until the lights flash; the time varies by model, so check the quick start guide for yours.
Enterprise kit: there is no default to look up
A Catalyst switch or an ISR router out of the box has no password. It gives you a prompt over the console port, and everything is configured from there. If one is asking you for a password, somebody set it, and no list will help.
Getting back in means physical access to the console port and Cisco’s password recovery procedure for that platform, which keeps the running configuration. Cisco publishes it per model in its password recovery index.
Do not factory reset enterprise Cisco kit
On a switch carrying VLAN and port configuration, or a router holding routing policy, a reset turns a short password recovery into a rebuild. The console route keeps the configuration; the reset button does not.
Cisco password questions
What is the default Cisco username and password?
On Cisco Business and small business switches it is cisco for both. Firepower and Threat Defense firewalls use admin and Admin123, Cisco IMC on UCS servers uses admin and password, and enterprise IOS devices have none. The table above lists each product.
cisco / cisco does not work
Cisco Business and Catalyst 1200 and 1300 switches make you change both the username and the password the first time you log in, so the default only works on a new or reset switch. If someone has already set it up, you need their login or a factory reset.
Is the Cisco password case-sensitive?
Yes. Older Aironet access points are the common trap: their default is Cisco / Cisco with a capital C, while the switches use cisco in lower case.
What is the Firepower default password?
Admin123, with the username admin, on Firepower Management Center, Firepower Device Manager and the Firepower 2100. You must change it during first setup. Threat Defense Virtual on AWS is different: there the default password is the EC2 instance ID.
How do I log in to a Meraki device?
Meraki hardware is managed from the Meraki cloud dashboard and is tied to an organisation by serial number, so there is no local admin password. Second-hand Meraki kit still claimed by its previous owner has to be released by them or by Cisco support.