Router Username and Password Defaults, With Sources

Three Different Passwords People Mix Up

A home router usually involves three separate secrets, and most sign-in trouble starts with using the wrong one.

Router and provider apps, such as NETGEAR Nighthawk or My Spectrum, add their own account sign-ins. ASUS states it plainly: the admin login is neither the Wi-Fi password nor your ISP account.

A WPA2 or WPA3 Wi-Fi password runs 8 to 63 characters and only gets devices onto the network. If that’s the one you meant to update, see changing the Wi-Fi key instead.

Manufacturer Defaults, With the Source for Each

These are factory values from each maker’s support pages. They apply only to a router that has never been set up, or one that was just reset. If anyone chose a password during setup, that password replaced the default.

Two notes the table can’t hold. Linksys documents admin only for an unconfigured router, and the Recovery Key on its label resets just the admin password while keeping your settings (Linksys KB 132). Cisco’s values apply to its Business RV small-business line; older Cisco-branded Linksys home routers follow Linksys defaults.

ISP Gateways: Xfinity, Verizon, AT&T and Spectrum

Rented gateways follow the provider’s rules. Here’s what four large US providers document:

• Xfinity (10.0.0.1). Admin Tool access is off by default. In the Xfinity app, go to WiFi > View WiFi equipment > Advanced settings > Admin Tool online access, allow access, and create a new password. Only customers who turned access on before February 2026 can still use the sticker password. The toggle covers newer gateways such as the XB6, XB7, XB8 and XB10 (Xfinity support).
• Verizon (myfiosgateway.com or 192.168.1.1). The username is admin, and a unique default admin password is printed on the router label (Verizon support).
• AT&T (192.168.1.254). Gateway settings are protected by a 10-digit Device Access Code printed on the label (AT&T support).
• Spectrum (often 192.168.0.1). Many Spectrum routers open at that address, and the My Spectrum app handles Wi-Fi name and password changes.

Before resetting a rented gateway, ask the provider. A reset can leave the service offline until it’s configured again.

Why Newer Routers Ship Without a Shared Password

A shared default like admin/admin stops being secret once it’s in a manual. Two laws now restrict it:

• California SB-327, operative January 1, 2020, requires a preprogrammed password unique to each device, or a setup step that makes the user create new credentials before first access (bill text).
• The UK product security regime, in force since April 29, 2024, requires passwords that are unique per product or set by the user, and rules out ones that are easy to guess or built from counters or public information (GOV.UK).

In practice you’ll see two approaches. Some devices carry a unique admin password on the label, as Verizon and AT&T gateways do. Others, including newer NETGEAR, TP-Link and ASUS models, have you create one at first sign-in.

A unique password isn’t the whole defense. The malware in the FBI’s May 2025 alert on end-of-life routers needs no password at all, so firmware updates still matter.

Reading the Sticker Line by Line

The label is your best source, provided nobody has changed the settings since setup. Layouts differ, but most carry the same items.

• Model and hardware version, such as a V2 or V3 suffix. You need both to find the right manual and firmware.
• Serial number, which NETGEAR uses for admin password recovery.
• MAC address, a hardware ID you never type to sign in.
• Network name (SSID), sometimes one per band.
• Wi-Fi password, labeled Wi-Fi Key, Network Key, WPA Key or Wireless Password.
• Admin password, if the unit has a unique one. Look for Admin Password, Router Password, Device Password or, on AT&T gateways, Device Access Code.
• Login address or app code, such as a hostname, an IP address or a QR code for the setup app.

If the label shows only Wi-Fi details, the router probably expects you to create an admin password at setup. One exception: Tenda’s MF3 guide tells you to sign in with the label’s Wireless Password. Keep any photo of the label private.

Brands Where the Default Changes by Model

The same logo doesn’t guarantee the same login, so check your exact model and hardware version on the maker’s support page.

• TP-Link: some older models pre-fill admin in both fields; newer ones ask you to create a password. Deco mesh units are app-managed.
• NETGEAR: “password” on many models, 1234 on some older ones, and your own choice on newer ones. The field is case-sensitive.
• ASUS: admin/admin on some models, label credentials on others, and addresses vary. First sign-in opens Quick Internet Setup, where you set your own login.
• Huawei: carrier-branded units use their own addresses and credentials, and a secondary Huawei router in an address conflict can switch itself to 192.168.4.1.
• ZTE: most home gateways are customized by ISPs, so check the label or ask the provider.
• Belkin and Tenda: both show a password-only screen, and what belongs in it depends on the model and whether setup was finished.

If the Printed Details Are Rejected

1. 01
   Step 1: Make sure you’re on the router’s network and at its real address; the guide to signing in at 192.168.1.1 covers the basics.
2. 02
   Step 2: Confirm you entered the admin password, not the Wi-Fi key, with the right capitalization.
3. 03
   Step 3: Ask whoever set up the router. A password chosen at setup overrides the label.
4. 04
   Step 4: Check your password manager or the browser’s saved passwords for the router address.
5. 05
   Step 5: For a rented gateway, use the provider’s app or support.
6. 06
   Step 6: Try the maker’s recovery tool: NETGEAR’s serial-number and security-question recovery (KB 24220), the Linksys Recovery Key, or the Forgot password link on Tenda’s login screen.
7. 07
   Step 7: If nothing works, resetting when no password works brings back the factory login but erases every setting, including your Wi-Fi name and password.

Don’t cycle through default combinations. Some routers lock the login after repeated failures, and you should never try credentials on a router you don’t own or manage.

Storing a New Admin Password So It Isn’t Lost Again

Once you’re in, replace any default with your own password, different from the Wi-Fi password. The FBI recommends unique passwords of 16 to 64 characters for router accounts.

• Password manager: save the router address, the username and a note that this is the admin password.
• Paper backup: note it with the model number and date, and store it safely at home, not on the router.
• Shared households: tell the other person who manages the network where it’s stored.
• After any reset: the default returns, so set a new password straight away.

The security guide goes further on choosing and storing a strong admin password, along with other settings worth changing while you’re signed in.