Needing to remember your wireless network access key is a common occurrence, especially if it's been a while since you set up your equipment or if you've lost the piece of paper with your notes. Equipment owners MikroTik Users often encounter the problem that standard recovery methods that work on home routers from other brands don't apply as expected. The RouterOS interface is designed differently, and security information is stored in specific configuration sections.
There are several proven methods for extracting a saved encryption key, and the choice of a specific method depends on whether you have physical access to the device and whether specialized software is installed on the computer. We'll look at options using a utility. WinBox, web interface WebFig and the command line, so you can choose the one that is most convenient for you.
It's important to understand that to perform these steps, you'll need administrator rights (username and password) to log in to the router itself. If you've forgotten both your WiFi password and your router management login information, the situation becomes more complicated, and a full factory reset may be the only solution.
Using the WinBox utility to view the key
The most reliable and common way to view saved passwords is to use a proprietary utility. WinBoxThis program allows full access to all router settings, including hidden security settings that are not always clearly visible in the web interface.
Once connected to the device, you need to go to the wireless interfaces menu. Find the item in the left column Wireless and open it. You will see a list of all configured radio modules. Double-click on the interface name (usually it's wlan1 or wifi1) to open the properties window.
In the window that opens, go to the tab Security ProfileThis is where the encryption settings are stored. You will see a field WPA Pre-Shared Key, where your password is written. By default, the characters may be hidden with asterisks, but in WinBox Often, just hovering over the text or clicking the view button is enough to see it.
⚠️ Attention: Make sure you are looking at the security profile associated with your active interface, as MikroTik allows you to create multiple profiles with different passwords for different purposes.
If the standard view does not open the text, you can use the configuration export, which we will discuss below, but in most cases WinBox Allows you to see the key immediately. This is the fastest way for administrators accustomed to the utility's graphical interface.
Viewing your password through the WebFig web interface
Modern versions of the RouterOS operating system (especially version 7) offer an improved web interface known as WebFigIt's becoming increasingly functional and, in many cases, allows you to manage security settings without installing additional software on your computer.
To get started, enter your router's IP address in your browser's address bar. After logging in, find the section in the left-hand menu. WirelessUnlike older versions, settings can be grouped here. Select your interface and go to its configuration, often via a button with the interface's name or a gear icon.
You need to find a section Security or Security ProfileIn new versions of the interface, the password field (Passphrase) may be hidden. To see it, often just click the eye icon next to the input field or temporarily change the field's display mode.
What should I do if there is no "show password" button in WebFig?
Some versions of WebFig may not have a direct view button. In this case, copy the current value (if copyable) or use the terminal configuration export method described in the following sections of this article.
The web interface is convenient because it's accessible from any internet-connected device, including smartphones and tablets. However, keep in mind that the interface may differ depending on the installed theme or firmware version.
Using the terminal and the export command
For experienced users, the most informative method is to use the command line (Terminal). This method is universal and works the same on all versions of RouterOS, regardless of the interface version or device type.
Open terminal via WinBox (New Terminal button) or via the web interface. To see all wireless network settings, including passwords, enter the export command. The standard command export will show the configuration but hide the passwords. You need a command with a parameter show-secrets.
/export show-secrets file=wireless-configAfter executing this command, a file named wireless-config.rscTo see its contents directly in the terminal, use the command print or open the file through the menu Files V WinBox, dragging it to the desktop.
In the text file, find the line that starts with /interface wireless security-profiles set. This line will contain the parameter wpa-pre-shared-key="your_password"This is the access key we are looking for.
⚠️ Attention: Team show-secrets Displays passwords in clear text. Be careful when taking screenshots or copying terminal contents into public chats.
This method is great because it provides a full text report that can be saved as a backup of your settings. You can also instantly change your password through the terminal if the old one seems too simple.
Configuration analysis via the file system
operating system MikroTik stores its configuration in special files. Although directly reading the database's binary files is not recommended, exporting the configuration to a file and then examining it will yield the necessary data.
Sometimes it's useful to know where data is physically or logically stored. In the menu Files You can see a list of files. The main configuration file often has the extension .rsc if you did an export, or .backup if you made a backup through the menu System -> Backup.
Backup file (.backup) is binary and protected, it cannot be simply opened with notepad to read passwords. However, the export file (.rsc), created via the terminal, is a text file. This is what you should look for in the file list after running the export command.
| File type | Extension | Readability | Contains passwords |
|---|---|---|---|
| Export configuration | .rsc | Text | Yes (with show-secrets flag) |
| Full backup | .backup | Binary | Yes (but we can't read it without a router) |
| Log file | .log | Text | No (events only) |
| Script | .rsc | Text | Depends on the content |
Handling files requires care. Deleting or damaging system files may result in a reset or the need to reflash your device.
Reset settings and restore access
If none of the above methods help, because you forgot the password for logging into the router itself (admin), or if the device was configured by a previous administrator who did not leave contact information, the last resort is a reset.
On the body of most devices MikroTik there is a button ResetTo perform a reset, you must:
- ⚡ Turn off the router's power.
- ⚡ Press and hold the button
Resetand, without releasing it, turn on the power. - ⚡ Hold the button until the indicator flashes
ACT(usually 5-10 seconds). - ⚡ Release the button and wait for the system to boot.
After this procedure, the device will return to factory settings. The default login password is usually missing (blank). admin, and the WiFi network will be called MikroTik with open access or a password printed on a sticker on the bottom of the case (for new models with QuickSet).
⚠️ Attention: Resetting the settings will delete the entire configuration, including static IP addresses, ISP settings, and port forwarding. Use this method only if you have a backup or are ready to set up the network from scratch.
After the reset, be sure to immediately set a new, complex password for your login and wireless network to protect your channel from unauthorized access.
☑️ What to do after resetting your router
Questions and Answers (FAQ)
Is it possible to find out the WiFi password if I'm not connected to the router's network?
No, to view the password through WinBox To use the web interface, you must be connected to the router (via cable or WiFi) and know the administrator password. Without access to the management system, it is impossible to remove the key from the device.
Where is the password file located on the router itself?
Passwords are stored encrypted in the system configuration database. They can only be retrieved in readable form using the export command. /export show-secrets in the terminal, which generates a text file in the device's memory.
What should I do if the show-secrets command doesn't show the password?
Make sure you are entering the command correctly and that you have the correct privileges. full or writeAlso, check that the security profile is actually being used by the interface. In rare cases, functionality may differ on very old versions of RouterOS.
Is it safe to store the configuration export file on my computer?
Export file with passwords (show-secrets) contains all information about your network in clear text. Store it in a secure location, preferably in an encrypted archive, and delete it immediately after use if you no longer need it.