Forgot your Wi-Fi network password? MikroTik and can't connect new devices? Or do you urgently need to grant access to a guest, but the password isn't saved anywhere? This situation is familiar to many network administrators—especially if the router was configured a long time ago or wasn't set up by you. Luckily, MikroTik There are several ways to recover or change your wireless network password, even if you don't remember the current one.
Unlike household routers (like TP-Link or ASUS), where the password is often indicated on a sticker, MikroTik does not store it openly on the case. However, this does not mean that the data is lost forever. Depending on the model (RB951Ui-2HnD, hAP ac², CCR1009 etc.), firmware versions RouterOS and current security settings, you can:
- 🔍 View password in the settings via WinBox or WebFig (if there is access to the router).
- 🔧 Reset password to factory settings (if access is completely lost).
- 💻 Connect via SSH and extract the password hash for decryption.
- 📡 Use a backup copy configuration (if saved).
Important: Some methods require physical access to the device or knowledge of login credentials. RouterOSIf the router belongs to an organization, make sure you have permission to change the settings—unauthorized access could violate corporate security policies.
1. View Wi-Fi password via WinBox or WebFig
If you have access to the web interface or utility WinBox, the easiest way to recover your password is by using this method on all models. MikroTik With RouterOS v6.x and newer, including hAP ac³, RB4011 And RB750Gr3.
Step-by-step instructions:
- Connect to the router via Ethernet (recommended) or via an existing Wi-Fi connection.
- Open WinBox (you can download it from official website) or go to WebFig by address
http://192.168.88.1(default). - Enter your login and password to log in
RouterOS(default -adminwithout password, if not changed). - Go to the menu
Wireless → Security Profiles. - Select the security profile for your Wi-Fi network (usually
defaultor with the network name). - In the field
WPA Pre-Shared KeyorWPA2 Pre-Shared KeyThe current password will be displayed.
If the password field is empty or asterisks are displayed (), double-click on it - WinBox will show the real password. WebFig You may need to edit your profile to view it.
☑️ What to check before viewing a password
⚠️ Attention: If the option is enabled in the security settingshide-ssid=yes, the network name may not appear in the list of connections. In this case, search for a profile with a name that matchesSSIDyour Wi-Fi.
2. Password recovery via SSH access
If the web interface is unavailable (for example, due to a failure WebFig), you can connect to the router via SSH and extract the password using commands RouterOSThis method requires knowledge of the login/password to log in to the system.
Instructions for Linux/macOS or Windows (using PuTTY):
ssh admin@192.168.88.1
Enter password (blank by default)
/interface wireless security-profiles print
Find your profile (for example, default)
/interface wireless security-profiles get [find name="default"] wpa2-pre-shared-key
If the password is not displayed (instead of it ), use the command to export the configuration and find the password in the file:
/export compact show-no-pagination
Copy the output and look for the line with "wpa2-pre-shared-key"
In some versions RouterOS (For example, v7.1+) the password may be encrypted. In this case, it will need to be reset (see section 4).
What to do if SSH is disabled?
If SSH access is blocked, connect to the router via a console cable (COM port) or enable SSH via WinBox in the menu IP → Services, allowing access for your subnet.
3. Using a configuration backup
If you have a backup of your settings MikroTik (file with extension .backup), the Wi-Fi password can be extracted from it without accessing the router. This is relevant if you previously saved the configuration via System → Backup.
How to extract the password:
- Open the file
.backupin any text editor (for example, Notepad++ or VS Code). - Find the line containing
wpa2-pre-shared-keyorwpa-pre-shared-key. - Copy the value after the sign
=- this is the password.
Example of a line in a file:
set [ find default=yes ] wpa2-pre-shared-key="YourPassword123"If the file is encrypted (option encrypt=yes (When creating a backup), it's impossible to recover the password without access to the router. In this case, a factory reset will help.
| Recovery method | Access to the router is required | Admin password required | Works on encrypted backups |
|---|---|---|---|
| WinBox/WebFig | Yes | Yes | No |
| SSH/console | Yes | Yes | No |
| Backup | No | No | Only if it is not encrypted |
| Reset settings | Yes (physical) | No | No |
4. Resetting the MikroTik router to factory settings
If access to the router is completely lost (both the admin password and the Wi-Fi password are unknown), the only reliable way is hard resetThis method erases all settings, including passwords, and returns the device to its out-of-the-box state.
How to reset MikroTik:
- Press and hold the button
Reset(usually located near portsEthernet). - Without releasing the button, connect power to the router.
- Hold
Resetfor 10-15 secondsuntil the indicator starts flashingACT(or all lights will not go out, depending on the model). - Release the button and the router will reboot with factory settings.
After reset:
- 🌐 Connect to the router via cable (default IP address:
192.168.88.1). - 🔑 Login:
admin, the password is empty. - 📶 Reset Wi-Fi in the menu
Wireless.
⚠️ Attention: On models MikroTik WithRouterOS v7+(For example, RB5009) the reset process may differ. If after holdingResetThe router won't reset, try holding the button up to 30 seconds or use the command/system reset-configuration no-defaults=yesvia console.
5. Decrypting the password hash (for advanced users)
If you have access to the configuration file or command output /export, but the password is encrypted (displayed as 00:11:22:...), you can try to decrypt it. This method is only suitable for older versions. RouterOS (to v6.43), where weak encryption was used.
Algorithm of actions:
- Export the configuration with the command
/export compact. - Find the line with
wpa2-pre-shared-key- it will look like00:1A:2B:.... - Copy the hash and use online decryption services (eg. Hashcat or John the Ripper) indicating the algorithm
MikroTik RouterOS.
IN RouterOS v7+ Password hashes are more secure, and decrypting them without access to the router is practically impossible. If you need to recover your password on a new firmware, use other methods from this article.
6. Alternative methods: MAC filtering and guest access
If you need to connect your device to Wi-Fi but don't want to reset it or look for the password, consider these temporary solutions:
- 🔗 MAC filtering: Add the device's MAC address to the whitelist via
Wireless → Connect List(if the function is enabled). - 🚪 Guest network: Set up a separate network for guests with a different password (menu
Wireless → Security Profiles → Add New). - 📶 WPS: On some models (eg, hAP ac²) you can connect via
WPSby pressing the button on the router body.
These methods do not replace password recovery, but they allow you to quickly connect your device without changing basic settings.
FAQ: Frequently Asked Questions about MikroTik Wi-Fi Passwords
Is it possible to find out the Wi-Fi password without access to the router?
No, unless you have a backup of the configuration or physical access to the device. Passwords MikroTik are not transmitted in clear text over the network and are not stored on connected devices (unlike some home routers).
Why is the password displayed as asterisks in WinBox, but not shown when double-clicking?
This means that the option is enabled in the security settings. hide-password=yesTo see the password, disable this option in the menu. Wireless → Security Profiles or use the SSH command :put [/interface wireless security-profiles get [find name="default"] wpa2-pre-shared-key].
How do I reset my admin password if I've forgotten both it and my Wi-Fi password?
The only way is hard reset (see section 4). After this, the admin login/password will become standard (admin without a password), but all network settings will be lost.
Is it possible to recover a password via MikroTik Cloud?
No, MikroTik Cloud Doesn't store Wi-Fi passwords. The service is designed for remote management, but doesn't provide access to sensitive data such as security keys.
What should I do if the router doesn't assign an IP address via DHCP after a reset?
After hard reset, check:
- Connecting via cable to the port
Ethernet 1(it is often used asWANby default). - Network card settings on PC - IP should be obtained automatically.
- The default router address is
192.168.88.1(if not changed).
If the problem persists, assign the IP manually (eg. 192.168.88.2/24) and check access to WinBox.