Changing the password on the router RouterOS This is a basic but critical step to ensuring the security of your home or office network. Many users postpone this procedure, leaving their network at its default factory settings, which leaves their data vulnerable to unauthorized access. Password protection is the first and most reliable barrier against attackers who want to intercept traffic or use your Internet channel for their own purposes.
In this article, we will examine in detail all the available methods for changing the access key for a wireless network, using both the browser's graphical interface and a specialized utility. WinBoxYou will learn not only where to click, but also what parameters encryption are truly essential for modern security. The process takes just a few minutes but guarantees peace of mind for the future.
It is worth noting that the interface MikroTik may differ depending on the version of the operating system installed RouterOSIn the latest versions (v7 and later), the company has introduced a new interface called QuickSet and updated the menu Wireless, making them more understandable for beginners. However, the classic menu remains accessible and functional for experienced administrators.
Preparing to change security settings
Before making any changes to your router configuration, you need to make sure your device has a stable connection to it. This can be done via Ethernet cable Or by connecting to your current Wi-Fi network. A wired connection is preferred, as changing wireless network settings may temporarily disconnect your wireless connection, and you'll lose access to your settings.
You will also need to know the IP address of your gateway. By default, devices MikroTik often use the address 192.168.88.1, but it may have been changed previously. If the default address doesn't work, check your computer's network adapter settings or use the command line to determine the current gateway.
⚠️ Important: If you are changing settings remotely, over the internet (not on the local network), make sure you have physical access to the router to reboot it. A settings error may block access to the device, and it can only be restored via Reset Button on the body.
To log in, you'll need administrator credentials. If you've never changed them, the default login is admin, and the password field is often left blank. Changing the administrator password — this is a separate important procedure that is highly recommended to be carried out immediately after the first setup of the equipment.
Make sure VPN services and proxy servers are disabled on your device (computer or smartphone), as they can redirect traffic and block access to the router's local interface. This is a common reason why the settings page simply won't load, even though there's a physical connection to the device.
Login to the MikroTik web interface
Open any modern browser and enter your router's IP address in the address bar. After pressing Enter, you'll see a login window. admin and a password, if one was previously set. If the login is successful, the control panel will open. RouterOS.
The interface can be presented in two main views: classic or new (as of version 7). In the classic view, the menu is located vertically on the left; in the new view, it can be hidden in a sidebar or presented as tiles. We are interested in the section responsible for wireless connections, which is usually called Wireless.
In some configurations, especially if the router was configured using the quick setup wizard QuickSet, the main Wi-Fi settings can be displayed on the main page. Look for the field Wi-Fi Password or PassphraseIf you see a complex menu tree on the left, proceed to the next section of the instructions.
It is important to understand that changes in the web interface are applied instantly or after clicking a button OK/ApplyUnlike some consumer routers, MikroTik does not always require a reboot to apply new encryption settings, but reconnecting clients will be required.
Changing the password via the Wireless menu
After going to the section Wireless (often indicated by an antenna or radio wave icon), you will see a list of available radio interfaces. This is usually called wlan1, wifi1 or wifi2, depending on the model of your device MikroTikDouble-click the desired interface or double-click it to open the properties window.
In the window that opens, go to the tab WirelessThere is a field here. WPA Pre-Shared Key or Security ProfileIn modern versions RouterOS The password is often not stored directly in the interface properties, but is linked to the security profile. Find the line Security Profile and see which profile is selected (usually it is called default).
Click the three dots (...) next to the security profile name. A new window will open. Wireless Security ProfilesMake sure the profile is selected. default (or the one that is used) and press the button Edit (or double-click on the line). This is where the field is located. WPA Pre-Shared Key, where you need to enter the new password.
⚠️ Note: When entering a new password, please pay attention to the case of the letters. System RouterOS is case-sensitive, and the characters "A" and "a" will be treated as different. Also, avoid using spaces at the beginning or end of the password if you copy it from the clipboard.
After entering a new value in the field WPA Pre-Shared Key click OK, then Apply and again OK in all open windows. The router will immediately apply the new settings, and all connected devices will lose connection to the Wi-Fi network because the old key will no longer be valid.
☑️ Password Change Checklist
If you have a dual-band router (supporting 2.4 GHz and 5 GHz), make sure you change the password for both bands if they use different security profiles. Users often forget about the second band, leaving it with an outdated password.
Configuration via the WinBox utility
For professional setup and deeper control over the network, specialists use the utility WinBoxThis is a lightweight program that doesn't require installation and allows you to manage your router even if the web interface isn't working properly. It can only be downloaded from the official website. MikroTik, which guarantees the absence of viruses.
Launch WinBox and connect to the router using the MAC address (displayed in the neighbors list) or IP address. The login and password remain the same. After a successful connection, the program interface will prompt you to save the configuration if you changed anything before logging in, but for now, just log in.
Find the menu on the left side of the screen WirelessThe logic of actions here is completely analogous to the web interface:
- 📡 Select the desired wireless interface (e.g. wlan1).
- 🔐 Go to the tab Wireless in the interface properties window.
- 📝 Click on the security profile selection button (usually
default). - 🔑 In the profile window that opens, enter the new password in the field
WPA Pre-Shared Key.
Advantage WinBox is that you see all available options at once, without having to switch between browser tabs. In addition, WinBox Shows the actual channel load and a list of connected clients in real time, which is convenient for diagnostics.
What to do if you forgot your WinBox password?
If you've lost your administrator password and can't log in via either the web or WinBox, your only option is a physical reset. Find the Reset button on the router body, press and hold it for about 10-15 seconds while the power is on, until the ACT indicator starts flashing. This will restore the router to factory settings.
After applying the settings in WinBox You also need to reconnect all devices. The utility allows you to instantly see who is trying to connect in the section Registration (tab in the Wireless window), which displays authorization attempts with an invalid key.
Choosing the optimal security mode
Simply changing the password is not enough if a weak encryption algorithm is selected. In the security profile settings window (Security Profile) pay attention to the parameter Authentication TypesFor maximum compatibility and security in today's environment, you should select the mode WPA2 PSK or, if all your devices support it, WPA3 PSK.
Mode WPA1 is considered obsolete and unsafe, its use is not recommended. Mode WPA2/WPA3 mixed allows both new and old devices to connect, ensuring the best compatibility in a mixed environment. The encryption algorithm (Ciphers) it's better to leave it TKIP + AES for maximum compatibility or select only AES for increased speed and safety.
| Parameter | Recommended value | Description |
|---|---|---|
| Authentication | WPA2 PSK | A security standard supported by all modern devices. |
| Ciphers | AES | Data encryption algorithm. AES is more secure and faster than TKIP. |
| Group Key Update | 1h 0m 0s | Group key change interval. The default value is 1 hour. |
| PMKID Mode | Yes | Speeds up device reconnection (roaming), useful for smartphones. |
Changing these settings will also disconnect all clients. Make sure you select AES, since the use of only TKIP may limit your Wi-Fi connection speed to 54 Mbps, even if your plan and router support much higher speeds.
Some models MikroTik allow you to set up a guest network with a separate password. For this, a second virtual interface is created (Virtual AP) with its own security profile. This allows you to grant access to guests without revealing the password to the main network where your personal devices are located.
Save configuration and reboot
One of the key features RouterOS The distinction is made between the current (running) configuration and the saved configuration. All changes you make through the menu are applied immediately ("live"), but they are not automatically written to permanent memory when the power is turned off.
To ensure the new password remains intact after a router reboot (for example, after a power surge), you must explicitly save the configuration. The web interface usually has a button for this. Save or Write (often located in the upper right corner or in the menu System). IN WinBox When you exit the program, a dialog box will appear asking "Save configuration?", to which you must answer "Yes".
⚠️ Note: Interfaces and button layouts may vary depending on the firmware version. If you don't see the save button, use the command in the terminal or ensure autosave is enabled in your system settings (although relying on it is risky).
After saving the configuration, it is recommended to reboot the device to ensure all services start correctly with the new settings. This can be done through the menu. System -> Reboot or simply turn the router's power off and on.
Test your network after rebooting. Connect your phone or laptop, entering the new password. If the connection is stable and the internet works, the process was successful. If not, check to see if you made a typo when entering the password in the router settings.
Additional network security measures
Changing your password is just the first step. To fully protect your network, MikroTik It's worth considering other settings as well. For example, disabling the service WPS (Wi-Fi Protected Setup), which often contains vulnerabilities that allow passwords to be bypassed. RouterOS WPS is usually disabled by default, but it's worth checking.
It is also recommended to limit the list of connected devices by MAC addresses (Access List). This will allow you to whitelist only known devices, even if someone learns your password. However, this adds complexity to network maintenance, as you'll have to change the router settings for each new device.
Don't forget to update your router's software regularly. Company MikroTik constantly releases patches to close security holes. You can check for updates in the section System -> Packagesby pressing the button Check for Updates.
How often should I change my Wi-Fi password?
For a home network, changing your password frequently (every month) doesn't make much sense if you use a complex key (more than 12 characters, numbers, and special characters). Changing it every six months or a year is sufficient, as well as immediately if you suspect the password has become known to unauthorized persons (for example, if you gave it to someone who should no longer have access).
Is it possible to recover my password if I forgot it?
For security purposes, passwords in MikroTik (and most routers) are stored in hashed form. This means you can't view a "forgotten" password in the settings—it will only contain asterisks or hidden characters. The only way to view it is on an already connected device (in Windows network properties or in the Wi-Fi settings on Android/iOS) or by resetting the router to factory settings.
Does changing your password affect your internet speed?
Changing your password itself doesn't affect speed. However, if you simultaneously change the encryption type (for example, from TKIP to AES) or the frequency channel, speed may change. Switching to AES usually improves performance, and choosing a less crowded channel in the 2.4 GHz band stabilizes the connection.
What should I do if my devices won't connect after changing the password?
Try selecting "Forget Network" on the device that's failing to connect, then reconnect using the new password. Sometimes operating systems cache old security settings and attempt to use them, which causes an authorization error.