Changing your wireless network password is a basic yet critical procedure for administering a home or office network. A router owner may need to restrict access if they notice suspicious activity or simply want to set a more complex encryption key after purchasing a new device. Mikrotik This process has its own nuances that differ from standard home routers and requires a careful approach to interface settings.
Operating system interface RouterOS It may seem overloaded for a beginner, but the setup logic here is built as consistently as possible. Wireless network security Depends not only on the complexity of the character combination but also on the chosen encryption protocol. An incorrect setting can render even a complex password useless if an outdated data protection method is used.
In this article, we'll cover two main methods for making changes: the WinBox graphical interface, which is the de facto standard for administrators, and the WebFig web interface, accessible from any browser. Both methods produce the same results, but the choice of tool depends on your preferences and your current access to the hardware.
Preparing to change wireless network settings
Before making any configuration changes, you must ensure a stable connection to the router. The safest way to make settings is via an Ethernet cable., as the wireless module may briefly reboot or change channel when applying the new settings, which will result in a disconnected connection if you configure the network remotely. Make sure your computer or laptop is connected to one of the device's LAN ports with a cable.
You will also need the latest version of the utility. WinBox, which can be downloaded from the manufacturer's official website, or simply a browser if you prefer the web interface. To log in, you'll need the administrator username and password. By default, in newer versions of RouterOS, logging in with a blank password or the default "admin" without a password is often blocked for security reasons, so make sure you know your credentials.
⚠️ Attention: If you change Wi-Fi settings while connected to the same router's wireless network, you're guaranteed to lose your connection immediately after clicking "Apply." You'll only be able to restore access by reconnecting with a new password.
Check your device model. Although the instructions are universal for most versions. RouterOS (v6 and v7), the location of some tabs may vary slightly depending on the installed license and software version. In newer models, such as hEX or audience, the interface may be optimized for mobile devices, but the logic remains the same.
Changing your password using the WinBox utility
Utility WinBox Provides the most comprehensive access to all configuration parameters. After launching the program and connecting to the device (via MAC address or IP), go to the left menu and select WirelessThis will open the Wireless Interfaces management window, which displays all active radio modules of your router.
In the window that opens, you will see a list of interfaces, usually labeled as wlan1, wlan2 or specifying the frequency. Double-click the desired interface or select it and click the double-down arrow button to edit the properties. Then go to the tab Wireless in the interface properties window. This is where the main network broadcasting parameters are located.
Find the field Security ProfileBy default, the value there is often defaultTo change your password, click the ellipsis (...) button next to this field or go to the menu Wireless -> Security Profiles in the main window. In the list of security profiles that opens, select the active one (usually it is marked in blue or has the status R running) and open its properties by double-clicking.
In the security profile settings window, you are interested in the fields at the bottom of the tab GeneralFind the lines WPA Pre-Shared Key And WPA2 Pre-Shared KeyEnter your new character combination there. It's important that the key length be sufficient to ensure encryption strength.
☑️ Check before saving
After entering the data, click OK, then Apply and again OK in all open windows. The changes will take effect immediately. If you use a dual-band router, be sure to repeat the process for the second band (2.4 GHz and 5 GHz), as they may have different security profiles.
Configuration via the WebFig web interface
Web interface WebFig It's convenient because it doesn't require installing any additional software and is accessible from any device with a browser. To log in, enter the router's IP address (often by default). 192.168.88.1) in the address bar. After logging in, you'll be taken to the Dashboard main page.
Navigating in new versions RouterOS v7 and relevant v6 may vary. In the classic menu on the left or in the top menu, find the section WirelessIn some builds it may be located inside a tab. InterfacesSelect the desired wireless interface from the list and click the gear icon or the edit button.
Unlike WinBox, settings here can be divided into different tabs for easier navigation. You need to find the section responsible for security. This is often a separate tab. Security inside the interface properties or a reference to Security Profiles in the side menu. The logic is the same: select a profile, go to edit, and change the fields. WPA Pre-Shared Key.
After making changes, be sure to click the button OK or Apply at the bottom of the page. The interface may prompt you to reload the configuration, but usually, simply applying the changes is sufficient. Check network access from your mobile device to ensure the new password works correctly.
Selecting an encryption protocol and security profile
Simply changing the characters is not enough - it is important to choose the right encryption algorithm. In the window Security Profiles you will see check marks opposite WPA1, WPA2 And WPA3The modern standard is WPA2, which provides reliable protection. Use WPA1 It is strongly discouraged as this protocol is considered obsolete and easily hacked.
The latest devices support the standard WPA3If all your gadgets (smartphones, laptops, TVs) were released no earlier than 2018-2019, it makes sense to switch exclusively to WPA3 or mode WPA2/WPA3 mixedThis will significantly increase the network's resilience to brute-force attacks, but older devices may no longer be able to see or connect to the network.
Pay attention to the parameter EncryptionFor WPA2, the optimal choice is AES CCMP. Mode TKIP This is a legacy of older standards and reduces overall network speed and security. Make sure AES is selected in the profile settings.
| Protocol | Security | Compatibility | Recommendation |
|---|---|---|---|
| WPA1 | Low | High (old devices) | Do not use |
| WPA2 (AES) | High | Very high | Recommended |
| WPA3 | Very high | Medium (new devices) | For modern networks |
| WPA2/WPA3 | High | High | Optimal balance |
When selecting mixed mode WPA2/WPA3 The router broadcasts signals that are understandable to both types of devices. This is the most flexible solution for a home with both the latest flagships and devices from several years ago.
Hiding the SSID and additional security measures
One additional measure that is often discussed is hiding the network name (SSID). There is a checkbox in the wireless interface settings. Hide SSID (or Default Authenticate (in combination with other parameters). When this option is enabled, the network stops broadcasting its name, and to connect, the user must manually enter not only the password but also the network name.
However, security experts consider this method a "foolproof" measure rather than a real security measure. A hidden network is easily detected by specialized traffic scanners, and for legitimate users, it creates unnecessary inconvenience when connecting new devices. It's much more effective to use MAC address filtering, if strict access control is required.
⚠️ Attention: Hiding your SSID doesn't encrypt your data. If you're not using WPA2/WPA3, your traffic can be intercepted even if your network name is hidden.
To implement MAC address filtering, go to the menu Wireless -> Access ListHere you can create rules that allow connections only to specific devices. Add the MAC addresses of your trusted devices and set the parameter Allow V yes, and for all the others (the default rule) set no.
What is a MAC address?
A MAC address is a unique identifier for a network interface, assigned by the manufacturer. It appears as a set of 12 hexadecimal digits (e.g., 00:1A:2B:3C:4D:5E). It can be spoofed, but for home security against neighbors, this is usually sufficient.
Common errors and problems when setting up
Users often encounter a situation where their devices cannot connect after changing their password. The first cause is caching of old settings on the client device. The phone or laptop "remembers" the old key and tries to use it. Solution: select the network on the device, tap "Forget Network," and then reconnect.
The second common error is character incompatibility. Some older devices may incorrectly process passwords containing specific characters or spaces, even though the WPA2 standard supports them. If you encounter problems, try using only Latin letters and numbers.
It's also worth mentioning the reset option. If you've lost access to your router or forgotten the administrator password, a physical reset will help. Most models have a reset option. Mikrotik there is a button Reset. Hold it down while turning on the power for about 10-15 seconds (until the indicator starts flashing) USR or ACT), you will return the device to factory settings.
FAQ: Frequently Asked Questions
Is it possible to change the Wi-Fi password via a mobile app?
There is no official Mikrotik app for full setup, but there is an app QuickSet (for older models) or Mikrotik (for new users), which allows you to perform basic operations. However, for a full password change and security settings, it's better to use a browser on your phone and open the router's web interface.
Will the Wi-Fi password be reset when updating the firmware?
No, updating the operating system RouterOS Doesn't affect user configuration. All settings, including passwords and security profiles, are preserved. However, before any update, it is recommended to back up your configuration via the menu. Files -> Backup.
What is the maximum password length supported?
The WPA2-PSK standard allows for a passphrase of 8 to 63 characters. Using a 63-character passphrase provides maximum cryptographic strength, but is difficult for humans to remember, so 12-20 characters is optimal.
Why did I lose internet access on all my devices after changing my password?
You've likely changed not only the password but also the encryption type (for example, switching to WPA3 only), and your devices are simply unable to authenticate. Go back to the settings and select Mixed Mode or WPA2.