Fortinet Default Passwords
This page lists 12 confirmed default credentials for Fortinet equipment, covering 12 models. The pairing you are most likely to need is admin with bcpb<SERIAL>.
Entries are reachable over https, console and multi. 1 of these entries use a protocol that sends the password in clear text, so use them on a trusted network and change the password once you are in.
admin10 of 12 entriesbcpb<SERIAL>2 of 12 entries| Model | Protocol | Access | Username | Password |
|---|---|---|---|---|
| FORTIADC – CONSOLE PASSWORD RECOVERY | CONSOLE | Admin | maintainer | bcpb<SERIAL> |
| FORTIANALYZER | HTTPS | Admin | admin | no password set |
| FORTIAP (AFTER FACTORY RESET) | CONSOLE | Admin | admin | no password set |
| FORTIAUTHENTICATOR | HTTPS | Admin | admin | no password set |
| FORTIGATE | TELNET | Admin | admin | no password set |
| FORTIGATE (ALL MODELS) – FACTORY-DEFAULT OR AFTER FACTORY RESET | HTTPS | Admin | admin | no password set |
| FORTIGATE (ALL MODELS) – FACTORY-DEFAULT OR AFTER FACTORY RESET, CLI | SSH | Admin | admin | no password set |
| FORTIGATE (FORTIOS PRIOR TO 7.2.4) – CONSOLE PASSWORD RECOVERY | CONSOLE | Admin | maintainer | bcpb<SERIAL> |
| FORTISANDBOX | HTTPS | Admin | admin | no password set |
| FORTISWITCH (FORTISWITCHOS, STANDALONE) | MULTI | Admin | admin | no password set |
| FORTISWITCH MANAGED BY FORTIGATE (FORTIOS 7.6.1 AND LATER) | MULTI | Admin | admin | unique to your unit |
| FORTIWEB | HTTPS | Admin | admin | no password set |
About Fortinet
Fortinet makes the FortiGate firewall line and associated security appliances. The Fortinet records here run across the FortiGate and FortiSwitch lines.
Reaching the login page
The admin page on most Fortinet units answers at http://192.168.1.99. If that address does not load, the router is whatever your computer lists as its default gateway — ipconfig on Windows or ipconfig getoption en0 router on a Mac will tell you.
What the Fortinet defaults look like
admin is the username on 10 of the 12 entries. 9 of them shipped with no password at all. Where one is set, bcpb<SERIAL> comes up most often, on 2 entries.
One of them is reached over a protocol that puts the password on the wire in clear text, so work from a machine on the same wired network rather than across the internet, and change the password once you are in.
If the Fortinet password has already been changed
There is a recessed reset button on the back or underneath that needs a straightened paperclip. Hold it in for thirty seconds with the unit powered on. Let go when the lights change pattern, and give it a couple of minutes to come back up.
A reset clears more than the password. The Wi-Fi name and key go back to what is printed on the label, port forwards and firewall rules are discarded, and any static addressing is lost. Photograph the settings pages first — it takes two minutes and saves an evening.
Share This Page