Changing your wireless network password is a basic step that should be taken immediately after purchasing new equipment or if you suspect unauthorized access. Many users put this off, unaware of the risks, but weak Wi-Fi security is the main cause of personal data leaks. RouterOS, which is installed on devices Mikrotik, this process has its own characteristics that differ from standard home routers.
The setup interface may seem complex to a beginner due to the abundance of technical parameters and tabs. However, if you break the procedure down into sequential steps, the task becomes quite solvable even without in-depth knowledge of network technologies. It is critical to remember that once the new settings are applied, all connected devices will immediately lose their internet connection. You will need to re-enter the new access key on each gadget.
In this article, we will examine in detail the two main methods of configuration management: through a graphical interface in the browser and using a specialized utility. WinBoxWe'll also focus on choosing a strong password and security settings that will protect your network from traffic interception. Proper access point configuration is essential for stable and fast operation of your entire home network.
⚠️ Attention: The interfaces of RouterOS v6 and v7 may differ visually. The layout of menu items sometimes changes depending on the specific device model and firmware version installed.
Preparing to change security settings
Before making any changes to your wireless network configuration, you need to ensure a stable connection to your router. The most reliable way is to connect via LAN cable (Ethernet), as changing the WiFi password will disconnect the wireless connection. If you plan to change settings remotely or only via WiFi, make sure you have physical access to the device in case of a failure.
You will need to know the gateway IP address (by default this is often 192.168.88.1) and login credentials for the management system. The factory login and password are usually located on a sticker on the bottom of the device. For administrative access, the default login is admin, and the password field is often left blank if you haven't set up protection before.
It's recommended to prepare a new password in advance that meets modern security requirements. It should be sufficiently long and contain a variety of characters. Using simple combinations, such as birth dates or numeric sequences, makes the network vulnerable to automated guessing.
☑️ Preparing to set up Mikrotik
Logging into the RouterOS control panel
To get started, open any modern web browser on a connected computer. Enter your router's IP address in the address bar. If you haven't changed your network settings before, try the default address. 192.168.88.1The browser will request authorization, after which you will be taken to the interface. WebFig.
An alternative and more professional method is to use the program WinBoxThis utility allows you to connect to the device even by MAC address, which is convenient if the IP address is unknown or has changed. Download the program from the manufacturer's official website and run it as administrator.
After successful authorization, you'll see the main screen with system status information. This displays CPU load, memory usage, and a list of active interfaces. We're interested in the section responsible for wireless connections, which may be called [in different firmware versions] Wireless or be in the menu Interfaces.
| Parameter | Default value | Recommended value |
|---|---|---|
| IP address | 192.168.88.1 | Anyone in the 192.168.xx subnet |
| Login | admin | admin (or your own) |
| WebFig Port | 80 / 443 | Non-standard port |
| Protocol | HTTP/HTTPS | HTTPS only |
Setting up WiFi via the WebFig web interface
In new versions of the operating system RouterOS v7 The interface has been significantly redesigned. To find the wireless network settings, go to the menu Wireless in the left sidebar. If you have an older version (v6), look for the item Wireless in the top menu or in the list of interfaces.
Find your WiFi module in the list of interfaces, it is usually designated as wlan1 or wifi1Double-click it or click the edit button (pencil icon). This will open the interface properties window, where you need to go to the tab Security Profiles or simply Security.
This is where the field is located Passphrase, where you need to enter the new access key. Make sure that in the item Authentication Types modern encryption standards were chosen, such as wpa2-psk And wpa3-pskOlder protocols such as WEP or WPA-TKIP are strongly discouraged due to their low security.
After entering the new password, click the button OK or Apply, and then don't forget to save your changes by clicking the floppy disk icon in the top corner of the screen. If you don't do this, all settings will be reset to their previous state after rebooting the router.
⚠️ Attention: Changing the encryption type or password will disconnect all devices from the network. Make sure you don't lose access to the router itself if you manage it via WiFi.
Changing your password using the WinBox utility
Program WinBox Provides more detailed access to configuration and is often faster than the web interface. After connecting to the router, find the item in the left menu WirelessIn the window that opens, you will see a list of all wireless interfaces available on your device.
Double-click on the desired interface (for example, wlan1). In the properties window that opens, go to the tab Security Profiles. Here you can select the default profile (usually default). Click the button with three dots or select a profile from the list and click the edit button.
In the security profile editing window, find the field WPA Pre-Shared Key or PassphraseEnter your new, complex password here. Also, make sure the boxes next to it are checked. WPA2 PSK and, if supported, WPA3 PSKThis will ensure maximum protection of transmitted data.
After making changes, click OKFor the settings to take effect, you need to save the configuration. In WinBox, this is done through the menu. Files -> button Backup or simply by pressing a key combination if it is configured, but more often it is enough to press the save button in the main window.
Choosing a strong password and encryption type
The security of your network directly depends on the complexity of your password and the encryption algorithm you choose. Modern standards require the use of a protocol WPA3, which replaced WPA2. It protects against brute-force attacks even if the password is not particularly complex, although complexity should still be a consideration.
When creating a password, avoid using dictionary words, pet names, or simple sequences. The optimal password length for a home network is 12 to 20 characters. Use a combination of uppercase and lowercase letters, numbers, and special characters, such as !, @, #, $.
Many users make a mistake when choosing the encryption type. TKIP for compatibility with older devices. This creates a security hole, as the protocol has long been compromised. If you have a very old device that doesn't support AES, it is better to consider replacing it than to weaken the security of the entire network.
Why is WPA3 better than WPA2?
The WPA3 protocol uses a more secure handshake mechanism (SAE), which prevents offline password guessing attacks. Even if an attacker intercepts the connection process, they won't be able to recover the password without interacting with the access point.
Additional wireless network security measures
Changing your password is just the first step. For increased security, we recommend disabling this feature. WPS (Wi-Fi Protected Setup). This technology allows you to connect to a network with the press of a button or a PIN code, but its implementation often contains vulnerabilities that allow attackers to quickly gain access.
You should also consider hiding the network name (SSID) if you want to prevent your access point from showing up in neighbor lists. However, keep in mind that this isn't complete protection, as professional tools can easily detect hidden networks. Filtering by MAC addresses, although this method does not provide a 100% guarantee.
Don't forget to update your router's firmware regularly. MikrotikThe manufacturer constantly releases patches to fix software vulnerabilities. Outdated version RouterOS can become easy prey for hackers, even if you have the most complex password in the world.
⚠️ Attention: MAC address filtering can be inconvenient when guests arrive. Enable this mode only in special, urgent cases.
Frequently Asked Questions (FAQ)
What should I do if I forgot the password for my Mikrotik router?
If you've forgotten your password for the management system (admin), you'll need to perform a factory reset (Reset Configuration). To do this, with the router turned on, press and hold the Reset button until the ACT LED flashes, then release. All settings, including internet and WiFi, will be deleted.
Is it possible to change WiFi password from phone?
Yes, this is possible. You need to connect to the router's network and open its IP address in your browser. WebFig's interface is adapted for mobile devices, although using it on a small screen may be less convenient than on a computer.
Why don't some devices connect after changing the password?
It's possible that an old network profile with incorrect security information is saved on your device. Try selecting your network on the affected device and tapping "Forget Network," then reconnecting using the new password.
How often should I change my WiFi password?
Frequent password changes aren't strictly necessary for a home network if you use a strong key and the WPA2/WPA3 protocol. You should change your password if you suspect a hack, when handing over the device to new tenants, or if you've shared the password with a large number of temporary guests.