How to find the Wi-Fi password on a TV set-top box: step-by-step instructions for all models

Forgot your home Wi-Fi password and can't access your router? This situation is familiar to many people, especially when the only device connected to the network is TV set-top box. Fortunately, most modern media players (from Android TV to Apple TV) store network data in their memory. In this article, we'll look at all working methodsHow to extract a saved Wi-Fi password directly from the set-top box—without a computer, smartphone, or resetting the router.

Important: Methods vary depending on operating system prefixes. On Android TV (including models from Xiaomi, NVIDIA Shield, Sony Bravia) the process is simpler than on Apple TV or proprietary firmware (for example, MAG or Dune HD). We will analyze each case in detail, including hidden functions of the engineering menu, which manufacturers do not advertise.

If your set-top box is connected to the network via a cable (Ethernet), the methods in this article won't help—Wi-Fi data is simply not saved. In this case, you'll have to find the password on your router or reset it to factory settings.

1. Methods for Android TV (Xiaomi, NVIDIA Shield, Sony, Philips, etc.)

Set-top boxes based on Android TV (including Mi Box S, NVIDIA Shield TV Pro, Sony Google TV) store Wi-Fi passwords in a system file wpa_supplicant.conf. It can be accessed in two ways: through built-in file manager (if installed) or using ADB commands.

The easiest option is to use the app FX File Explorer (or similar) with rights rootIf you don't have root access, the following method will work ADB (Android Debug Bridge), but it requires connecting the console to a computer. Let's consider both options.

  • 📁 Via file manager: Root access required. Open /data/misc/wifi/WifiConfigStore.xml or /data/misc/wifi/wpa_supplicant.conf and find the line psk="your_password".
  • 🖥️ Via ADB: Connect the set-top box to the PC, run the command
    adb pull /data/misc/wifi/wpa_supplicant.conf
    and open the downloaded file.
  • 🔍 Via the app: Install WiFi Password Viewer (requires root). The app will display all saved networks and passwords.

Install FX File Explorer or a similar manager | Enable USB debugging in the console settings | Connect the console to a PC (for the ADB method) | Download ADB platform tools (for PC)

-->

⚠️ Attention: On some consoles (for example, Xiaomi Mi Box 4K) file wpa_supplicant.conf may be encrypted. In this case, only resetting the router or using alternative methods (see section 3).

2. How to find the password on an Apple TV (all generations)

Apple TV doesn't provide direct access to saved Wi-Fi passwords through the interface. However, there is a workaround: if the set-top box is connected to iCloud Keychain (Apple account), the password can be retrieved through another Apple device (iPhone, Mac). Here's how:

  1. On iPhone or Mac open Settings → Wi-Fi.
  2. Find your network in the list and click on the icon ! (information).
  3. Click Copy password (Face ID/Touch ID verification required).

If Apple TV not synced with iCloud, only resetting the router or connecting to the set-top box via USB-C and the use of specialized software (for example, iMazing). The latter method requires technical skills and may void the warranty.

3. Engineering menu and hidden settings (for MAG, Dune HD, older consoles)

Set-top boxes with proprietary firmware (for example, MAG 250/322, Dune HD, some models Roku) often hide Wi-Fi data in engineering menuIt can be accessed through a combination of buttons on the remote control or by connecting via Telnet/SSH.

For MAG-prefixes:

  1. Go to Settings → System → Service Menu (default access code - 0000 or 1234).
  2. Select Wi-Fi Settings → Saved Networks.
  3. The password will be displayed in the field. Password or Key.

For Dune HD:

  • Connect to the set-top box via SSH (login: root, password: dune).
  • Run the command:
    cat /tmp/wpa_supplicant.conf
What to do if the engineering menu is blocked?

On some consoles (for example, MAG 4xx) The service menu is blocked by the operator. In this case, two options remain:

1. Reset the set-top box to factory settings (Wi-Fi data will be erased).

2. Use hardware method - connect the set-top box to the router via cable and scan the network from another device (for example, via Wireshark) to intercept handshake packets. This method is complex and requires skill.

4. Alternative methods: without root and ADB

If none of the above methods work, try these options:

  • 📱 Connect your smartphone to the set-top box via USB: Some prefixes (for example, Xiaomi Mi Box) allow you to transfer files via MTPCopy the file /data/misc/wifi/WifiConfigStore.xml on your phone and open it using a text editor.
  • 🔄 Resetting the router to factory settings: Click the button Reset on the router (usually it's recessed and requires a paperclip). After resetting, the password will be located on a sticker on the device (for example, admin/admin or 12345678).
  • 🖥️ Use a second router: Connect the set-top box to another router (for example, from a smartphone in access point mode), then scan the network from a PC via WirelessKeyView (for Windows).

⚠️ Attention: If your router supports the function WPS (quick connect button), you can connect the set-top box to the network without entering a password. However, this method only works if WPS is enabled on the router (many modern models disable it by default due to vulnerabilities).

5. Compatibility table of methods with popular consoles

Set-top box model operating system Working methods Root/ADB required?
Xiaomi Mi Box S, Mi Box 4K Android TV 9-11 File manager, ADB, WiFi password viewer Yes (except ADB)
NVIDIA Shield TV Pro Android TV 11+ ADB, engineering menu (##786#) No (for ADB)
Apple TV 4K (2022) tvOS 16+ iCloud Keychain, iMazing (USB-C) No
MAG 322/424 Linux (proprietary) Service menu, Telnet No
Roku Ultra Roku OS Resetting the router, WPS No

If your model is not in the table, try the universal methods: viewing via file manager (for Android) or network scanning (for the rest). On consoles with Fire OS (For example, Amazon Fire TV Stick) passwords are stored in a file /data/misc/wifi/WifiConfigStore.xml, but access to it is only possible with root rights.

📊 What TV set-top box do you have?
Android TV (Xiaomi, NVIDIA, Sony)
Apple TV
MAG or Dune HD
Roku
Other

6. Common mistakes and how to avoid them

When trying to extract a password, users often encounter typical problems:

  • 🔌 "ADB doesn't see the set-top box": Make sure that it is enabled in the console settings. USB debugging (Settings → For developers). If the item is not there, activate it by pressing 7 times on Build number on the menu About the console.
  • 📂 "The wpa_supplicant.conf file is empty": This means that the set-top box is connected to the network via a cable, not Wi-Fi. Check the connection type in Settings → Network.
  • 🔒 "The password is displayed as asterisks": In some firmware (for example, on MAG) the password is masked. Solution: connect the set-top box to the monitor via HDMI and take a screenshot of the screen with the password (you can count the stars).

⚠️ Attention: On consoles with Android TV 12+ (For example, Google Chromecast with Google TV) Wi-Fi file access is blocked at the system level. The only way out is to use resetting the router or connect the set-top box to another device via USB-C and scan traffic (method for advanced users).

7. Security: What to do after extracting the password

Once you have received your Wi-Fi password, we recommend:

  1. Change the password on the router via the web interface (192.168.0.1 or 192.168.1.1). Use a complex combination of 12+ characters (For example, K7#pL9@qR2$vN1!).
  2. Disable the feature WPS in the router settings (section Wi-Fi → Security).
  3. Activate guest network for devices that do not need access to local resources (for example, Smart TVs or game consoles).

If you often forget your passwords, save them in password manager (For example, Bitwarden or KeePass) or write it down on paper and keep it in a safe place. Don't use obvious combinations like 12345678 or qwerty — such passwords can be cracked in a few minutes.

FAQ: Answers to frequently asked questions

Is it possible to find out the Wi-Fi password on a set-top box without a computer?

Yes, but only if the prefix is ​​on Android TV and you have root access or a file manager is installed (for example, FX File Explorer). For Apple TV There are no ways to extract the password from iCloud without a computer. You will need an iPhone or Mac to extract the password from iCloud.

Why isn't my network listed in the wpa_supplicant.conf file?

This happens for three reasons:

  1. The set-top box is connected to the router via cable, and not via Wi-Fi.
  2. The file was cleared after updating the firmware.
  3. Your network is using hidden SSID (does not translate the name). In this case, the data can be stored in another file, for example /data/misc/wifi/WifiConfigStore.xml.

How do I reset my router password if I can't access the sticker?

If the data sticker is worn off or missing:

  • Try standard combinations: admin/admin, admin/1234, admin/password.
  • Use the utility RouterPassview (for Windows) - it selects passwords from a database of known combinations.
  • Reset the router to factory settings using the button Reset (Hold for 10-15 seconds). After the reset, the password will be the default one (specified in the router's instructions).

Is it possible to find out the password from the set-top box if it is not connected to Wi-Fi?

No. If the prefix never connected If the network is disconnected or the data has been wiped, it's impossible to retrieve the password. In this case, the only options are to reset the router or connect to another device that knows the password (such as a smartphone).

Is it safe to use ADB to extract password?

Yes, if you download official ADB tools from the website Google (chapter Platform Tools). Risks arise only when using third-party utilities or if the set-top box is connected to untrusted networks. After retrieving the password, we recommend disconnecting USB debugging in the settings.