Changing your wireless network password is one of the most basic, yet critical, steps to ensure the security of your home or office internet connection. Equipment owners MikroTik Often, administrators need to update access keys to restrict who has access to the local network, or simply after purchasing a new device for security reasons. Factory default settings rarely meet modern cybersecurity requirements, so manual configuration is a must for any administrator.
The procedure for changing the password on routers MikroTik It's a bit different from the interfaces of consumer routers like TP-Link or Asus, which can be confusing for beginners. WinBox or web configurator WebFig Provides deep control over wireless settings, allowing you to not only change symbols but also rebuild the entire security architecture. In this article, we'll cover every step in detail, from connection to the final network performance check.
It's worth noting that incorrect configuration can result in loss of access to the access point, so it's important to follow the steps carefully. We'll cover both graphical interface and command line methods so you can choose the most convenient option. A thorough understanding of the processes involved Wireless interface, will help you avoid common mistakes and ensure the stable operation of your network.
Preparing for setup and logging into the control system
Before making any changes to your wireless network configuration, you need to ensure a stable connection to the router itself. It's best to perform these steps by connecting your computer to the device. MikroTik by means of LAN cableThis will eliminate the risk of connection interruptions when applying new security settings, which would inevitably happen when using Wi-Fi. If a wired connection is not possible, make sure you are in an area with a strong signal.
To enter the control system, the utility is most often used WinBox, which can be downloaded from the manufacturer's official website, or any modern web browser. In the browser's address bar, you need to enter the router's IP address, which by default is usually 192.168.88.1If you have changed your address before or don't know it, you can use the utility WinBox, which will automatically detect neighboring MikroTik devices on the local network by MAC address.
When logging in, you will need to enter your administrator login and password. The factory default credentials are: login admin and an empty password field (or the password indicated on the sticker on the bottom of the case). After successful login, you will be taken to the main menu, where all configuration options will be available. At this stage, it is important to ensure you have administrator rights, as guest access will not allow you to change security settings.
⚠️ Warning: If you are changing settings remotely via the internet, make sure you have an alternative communication channel with the device (for example, access via an LTE modem or console port), as an error in the firewall or wireless interface settings can completely block remote access.
Search for the Wireless section and interfaces
After successfully logging into the control system, a toolbar will open. Depending on the version of your operating system, RouterOSThe interface may look different, but the logic remains the same. You need to find the menu responsible for wireless connections. In the classic WinBox interface, this is the left sidebar, where you need to find and click the button WirelessIn the web interface WebFig The corresponding item is located in the top menu or in the side navigation under the name "Wireless".
Once you open the section, you'll see a list of available wireless interfaces. On dual-band devices, there will be two: one for 2.4 GHz (usually wlan1) and for 5 GHz (usually wlan2). If you have a single-band router, there will be only one interface. To change the settings for a specific network, double-click the corresponding line or select it and click the edit button (the icon with a blue dot or pencil). This will open the interface properties window, where all key settings are located.
In the properties window that opens, we are interested in the tab WirelessThis is where the SSID (network name), operating mode, and, most importantly, security profile settings are located. Pay attention to the field Security ProfileBy default, a profile may be selected there. defaultWe need to either edit this profile or create a new one to avoid disturbing the settings of other virtual access points if they are in use. Clicking the arrow next to the profile name will open the security profile management menu.
What to do if there is no Wireless tab?
If you don't see the Wireless menu, the wireless package may not be installed or may be disabled. Go to System -> Packages and check for the package. Also, on some models (e.g., hAP ac²), the interface may be labeled wifi1/wifi2 depending on RouterOS v7.
Creating and configuring a security profile
In the window Wireless Security Profiles You will see a list of existing profiles. Standard profile default often has a blank password or uses an outdated encryption method. For reliable protection, it is recommended to create a new profile. Click the plus (+) button in the upper left corner of the window to add a new entry. In the Name Give it a descriptive name, for example, home-secure or office-wpa3, so that it can be easily identified in the future.
The key point is to select the encryption mode. In the field Mode You need to choose the most secure protocol supported by your client devices. Currently, the gold standard is dynamic keys in conjunction with WPA2 or WPA3Avoid using WEP or open networks, as they do not provide real security for transmitted data. In the field WPA Pre-Shared Key The password that the devices will use to connect is entered.
The password must be complex: use a combination of uppercase and lowercase letters, numbers, and special characters, and be at least 12 characters long. After entering the data, click OK or Applyto save the profile. Now go back to the wireless interface settings and to the field Security Profile Select the new profile you created instead of the default one. This will link the interface to the new security settings.
☑️ Check security settings
Changing the password and encryption settings
The actual password change occurs in the security profile editing window we discussed in the previous section. If you decide to use an existing profile (for example, default), just select it, click the edit button and in the field WPA Pre-Shared Key Enter your new secret key. The system will not require you to confirm it again, so be careful when typing to avoid typos.
It's important to understand the difference between the router admin panel password and the Wi-Fi password. The password we change in the section Wireless Security Profiles, is intended exclusively for client devices (smartphones, laptops, tablets). The administrator password is changed in the section System -> Users and serves to access the settings of the equipment itself MikroTikThese two concepts should not be confused, as compromising one of them leads to different consequences.
After entering a new key and selecting an encryption method (recommended WPA2 or WPA3), press the button ApplyAt this point, the router will restart the wireless module with the new parameters. All currently connected devices will immediately be disconnected and lose network access. This is normal system behavior, requiring re-authorization on each device using the new password.
| Parameter | Recommended value | Description |
|---|---|---|
| Mode | dynamic keys | Encryption key usage mode |
| Authentication Types | WPA2 PSK / WPA3 PSK | Authentication type (most secure) |
| WPA Pre-Shared Key | (Your complex password) | Access key for clients |
| Group Key Update | 01:00:00 | Group encryption key update time |
Additional wireless network security measures
Changing your password is just the first step. Ecosystem MikroTik offers a number of additional security enhancement tools that shouldn't be ignored. One important feature is the ability to disable technology. WPS (Wi-Fi Protected Setup). Despite the convenience of connecting via a push-button or PIN code, this protocol has known vulnerabilities that allow attackers to easily brute-force the access key. In the security profile settings, make sure the checkbox is checked. WPS removed.
Another effective method is to hide the network name (SSID). If you enable this option Hide SSID in the tab Wireless By changing the interface settings, your network will no longer appear in the list of available connections on smartphones and laptops. To connect, users will have to manually enter the network name and password. This doesn't provide 100% protection from security professionals, but it does provide excellent protection against nosy neighbors and automated scanners.
Also worth paying attention to is the function Access List (Access List). This allows you to create a whitelist of MAC addresses of devices that are allowed to connect. Even if someone learns your password, they won't be able to access the network unless their device is on the allowed list. This feature is configured in a separate tab. Access List within the Wireless menu and requires an individual approach for each client.
⚠️ Caution: Hiding the SSID may cause connection issues with some smart devices (IoT), such as robotic vacuum cleaners or light bulbs, that are unable to detect hidden networks. Use this feature with caution.
Checking the functionality and connecting devices
After applying all the settings, you need to make sure the network is working correctly. Use your smartphone or laptop, find your network name (SSID) in the list of available networks, and try connecting. If you've hidden the network, use the "Add network manually" feature and enter the name and new password. Successfully obtaining an IP address and the appearance of the Wi-Fi icon indicate the configuration is working correctly.
Check your internet connection speed and signal stability in different areas of the room. If you experience speed issues, you may want to change the wireless channel or channel width in the interface settings. WirelessOften, airwave congestion from neighboring routers requires manually selecting a less congested frequency, which is especially important in apartment buildings.
Don't forget to update saved passwords on all other devices: TVs, tablets, and printers. Previously connected devices will attempt to connect with the old password, which can cause errors in the router logs and a temporary decrease in performance due to constant authentication attempts. The easiest way is to select your network on each device, click "Forget Network," and then reconnect.
Solution and typical mistakes
During setup, users often encounter situations where devices don't see the network or can't connect to it. One common cause is incompatibility with encryption standards. If you've only installed WPA3, and the old device only supports WPA2, connection will be impossible. In such cases, you need to return to the profile settings and select Combined mode or lower the security requirements for compatibility.
Another common mistake is using special characters in the password, which some operating systems (especially older versions of Android or iOS) may interpret incorrectly. If you're having trouble, try using only alphanumeric characters (letters and numbers). Also, check if you have a MAC filter enabled, which can block new devices even if the password is entered correctly.
If you've lost access to your router after making changes, your only option is to reset it to factory settings. To do this, make sure the device is turned on. MikroTik you need to hold down the button Reset (usually a small hole) and hold it for about 10-15 seconds until the indicator ACT or USR The light will not start blinking. After this, the router will return to its original state, and you will have to go through the setup procedure again.
Is it possible to change the password via the mobile app?
There's no official MikroTik app for fully configuring routers. However, you can use third-party apps that support Telnet/SSH, or access the web interface through a smartphone browser by entering the router's IP address. The functionality is identical to the desktop version.
What should you do if you forgot your Wi-Fi password but still have access to the router via cable?
Access your router settings via WinBox or a browser and go to Wireless -> Security Profiles. The password is displayed in the WPA Pre-Shared Key field. If there are asterisks there, you can hide/show them or simply replace them with a new password you know.
Does password complexity affect internet speed?
No, password complexity (number of characters, use of special characters) does not affect data transfer speed. WPA2/WPA3 encryption protocols are implemented in hardware or by optimized drivers, and key verification occurs instantly upon connection. Speed depends on channel bandwidth, signal strength, and airwave congestion.
Do I need to reboot my router after changing the password?
A reboot is not required. The changes take effect immediately after clicking Apply or OK. The wireless module will automatically restart for a split second to apply the new security profile, but there's no need to turn off the router.
How often should I change my Wi-Fi password?
In a home environment, frequent password changes are not strictly necessary if a strong key (15+ characters) and the WPA2/WPA3 protocol are used. In an office environment, password changes are recommended when employees change or quarterly, but it is more effective to use Radius authentication systems for individual access.