In the digital age, the home network has become the central hub for vast amounts of personal information, making perimeter security a top priority. Changing the factory-set WiFi password for fiber-optic terminals is the first step immediately after the equipment is installed by the provider. Many users mistakenly believe that the complex cryptography of fiber optic cables (GPON) automatically protects their local network from intruders, but this is not the case, as the access point remains vulnerable to brute-force attacks.
The procedure for changing the access key may seem complicated at first glance, but it only requires attention and adherence to the sequence of actions in the device's web interface. Fiber optic terminalsOn-Line Modems (ONTs) or On-Line Networks (ONUs) have their own unique settings menus that distinguish them from traditional ADSL modems or cable routers. In this article, we'll cover all the nuances of setting up security to ensure your internet stays fast and inaccessible to uninvited guests.
Before making changes, make sure you're connected to the network of the device whose settings you're changing, otherwise you risk losing access to the admin panel. Modern terminals Devices from manufacturers such as Huawei, ZTE, Sercomm, or Eltex have similar operating logic, but the visual design of the interfaces can vary significantly depending on the firmware.
β οΈ Attention: Terminal management interfaces are constantly updated by providers. If you see differences in menu item names, look for synonyms or consult the documentation for your specific equipment, as the location of functions may change.
To get started, you'll need to know the default gateway IP address, which is usually found on a sticker on the bottom of the device. The standard addresses for accessing the control panel are usually 192.168.1.1 or 192.168.100.1, although some providers may use non-standard ports or domain names. Enter this address into the address bar of any browser (Chrome, Firefox, Safari) and press Enter to proceed to the authorization window.
The system will ask for your login and password to access the admin panel. These are also printed on the factory label, unless you've previously changed them yourself. For Huawei devices, a combination of admin / admin or Epuser / userEp, while ZTE can use admin / admin or user / userIf the default credentials aren't working, your provider may have changed them remotely, in which case you'll need to call technical support to obtain the latest credentials.
After successful authorization, you'll find yourself in the terminal's main menu, which displays the optical signal status and network interface status. Menu navigation can be horizontal or vertical, but look for sections with titles. Network, WLAN, Wireless or Wireless networkThese sections contain the security settings we need to change to protect our traffic.
- π Find the sticker on the bottom of the router and write down the IP address, username, and password.
- π Connect your computer to the router via cable or WiFi for a stable connection.
- π Open your browser and enter the gateway IP address in the address bar.
- π‘οΈ Enter your administrator credentials to log in to the system.
After logging into the control panel, the first thing you need to do is find the section responsible for the wireless network, which may have different names in different firmware versions. In terminals Huawei HG8245 or HG8247 you need to go to the tab WLAN, then select WLAN Basic Configuration and make sure that the function WLAN Enable activated. Next, go to the sub-item WLAN Security Configuration, where the main encryption settings are located.
In the field Authentication Mode or Security Mode It is necessary to choose the most reliable encryption protocol, which is currently WPA2-PSK or its newer version WPA3, if your equipment supports it. Avoid using protocols WEP or WPA without the number 2, as they are considered obsolete and can be easily hacked with special utilities in a matter of minutes. In the field WPA PreSharedKey or Passphrase Enter a new, complex password consisting of at least 12 characters, including uppercase and lowercase letters, numbers, and special characters.
β οΈ Attention: When you change your WiFi password, all connected devices (smartphones, laptops, TVs) will immediately lose connection to the network. You'll have to reconnect each one using the new access key.
Some providers use dual-band terminals that broadcast two networks: 2.4 GHz and 5 GHz. In this case, you need to find separate tabs or checkboxes for each band and change the password for both to ensure uniform protection. Often, you can set a more complex encryption algorithm for the 5 GHz network, as older devices that don't support newer standards simply won't see this network.
βοΈ Check security settings
After entering your new password, be sure to click the button Apply or Save At the bottom of the page, confirm the changes for them to take effect. The system may warn you that the current connection will be disconnected and prompt you to confirm the action. Agree and wait for the WiFi module to reboot, which usually takes 10 to 30 seconds. If the page doesn't update or is stuck loading, try refreshing the browser manually and logging in to the menu again using the new password if you also changed your admin access, or the old password if you only changed the WiFi key.
An important security aspect is to disable the feature WPS (Wi-Fi Protected Setup), which is often enabled by default on fiber optic terminals. This technology is designed to quickly connect devices with the push of a button, but it creates a massive security hole, allowing attackers to recover the password by brute-forcing the PIN. This option can be found in the same section. WLAN, often in a subsection WPS Configuration, where you need to uncheck the item Enable WPS.
For users seeking maximum protection, it's also recommended to change the SSID (network name), removing any personal information such as apartment number, last name, or address. Renaming the network will not only hide unnecessary information from neighbors but also allow you to easily identify your access point in an apartment building, where there may be dozens of networks with names like "WiFi" or "Home."
Why is WPS a threat?
The WPS feature uses an 8-digit PIN for authentication, which technically consists of two parts. Attackers can guess the first part of the code and then the second, reducing the hacking time from years to hours or even minutes, regardless of the complexity of your main WiFi password.
If you've forgotten your admin panel password or can't access the settings, the only solution is to reset the device to factory settings. There's a small hole on the back of the terminal with the inscription Reset or Default, where you need to press with a paperclip or needle and hold for 10-15 seconds until the indicators flash simultaneously. After this, the terminal will return to the factory settings indicated on the sticker, and you can set it up again. However, keep in mind that you may need to re-register the device with your provider to use the internet.
The table below shows the default login credentials for popular fiber optic terminal models commonly used by providers. Please note that this data is valid for factory firmware and can be changed by the installation wizard during installation.
| Terminal model | IP address | Login | Password |
|---|---|---|---|
| Huawei HG8245H | 192.168.100.1 | root | admin |
| ZTE F670 | 192.168.1.1 | admin | admin |
| Sercomm H-1140N | 192.168.1.1 | admin | 1234 |
| Eltex NTU-RG-1421-G | 192.168.1.1 | admin | admin |
After successfully changing the password and applying the settings, the system may prompt you to reboot the device to ensure stable operation of all services. This is a normal practice, allowing you to clear the cache and redistribute the terminal's processor resources, especially if the device has been running for a long time without interruption. A reboot also ensures that the new filtering and encryption rules are applied to all new connections.
Modern fiber-optic networks require not only password settings but also regular terminal software updates. Providers frequently release patches to address vulnerabilities in security protocols, so it's worth checking this section periodically. System Tools or Maintenance Check for new firmware versions. Automatic updates can be disabled, so manually checking every six months is a good habit to maintain security.
In conclusion, it's worth noting that securing your home network is a complex process, with changing your WiFi password being just the first, albeit critical, step. A fiber optic terminal is a fully-fledged computer, and its protection requires the same attention as protecting your personal laptop or smartphone. Regular monitoring of connected devices via the admin panel will help you spot suspicious activity early.
If after changing the settings the internet speed has dropped or there are connection interruptions, try changing the wireless network channel in the section WLAN Basic ConfigurationCongestion in the airwaves from neighboring routers can interfere with stable operation, and switching to a clear channel (for example, 1, 6, or 11 for the 2.4 GHz band) can significantly improve signal quality without replacing equipment.
What should I do if my smart plugs don't work after changing the password?
Smart devices often don't support new encryption protocols or require re-pairing. You'll need to remove the device from the smartphone app and re-add it, entering the new WiFi password. In rare cases, you may need to reset the outlet itself to factory settings.
Is it possible to set a password that consists only of numbers?
Technically, this is possible, but it's highly discouraged. A password consisting solely of numbers can be brute-forced hundreds of times faster than an alphanumeric key of the same length. For reliable protection, use a combination of characters.
How often should I change my WiFi password?
At home, it's sufficient to change your password every 6-12 months or if you suspect someone else has discovered it. Frequent changes (weekly) create inconvenience for users and increase the risk of you forgetting the current key.
Does a complex password affect internet speed?
No, password complexity does not affect data transfer speed. WPA2/WPA3 encryption protocols use hardware acceleration, and the access key is verified instantly upon connection, without creating any bandwidth load during use.