Changing a wireless network password is a basic procedure that an administrator should be able to perform confidently and quickly. Routers MikroTik They're renowned for their flexibility, but this is precisely why beginners often get lost in the plethora of settings, unable to figure out where exactly the desired setting is. Unlike simple home models, there's no single "change key" button, as the security system is built on profiles linked to interfaces.
You must understand that changing the access key will affect all connected users, who will be forced to re-enter their authorization data. This is a normal practice that ensures safety your perimeter, especially if you suspect unauthorized access to your network. Ignoring this step can lead to traffic leaks or the use of your channel for illegal activities.
The procedure for changing credentials on MikroTik RouterOS can be performed in two main ways: through a graphical utility WinBox or via the web interface WebFigBoth methods produce the same results, but the WinBox interface provides deeper access to logs and configuration details, making it preferred by professionals.
Before making any changes, make sure you have physical access to the device or are connected via cable. If you try to change the password while connected to a wireless network and make an error in the encryption settings, you will lose connection to the router until you reboot or reset it.
Preparing to change wireless network settings
The first step before making any configuration changes is to ensure a stable connection to the control device. It is best to use wired connection Via a LAN port to avoid the risk of connection interruption while applying new security settings. If this isn't possible, make sure your Wi-Fi signal is stable and your laptop or smartphone's battery is charged.
You'll need to know your current login credentials to access your router's management system. New devices often don't have an administrator password by default, but corporate networks typically require a complex character combination to access the router. Without superuser rights (admin or similar) change settings Security Profile it won't work.
- 🔌 Check the physical cable connection or Wi-Fi signal strength before starting work.
- 🔑 Make sure you have a valid MikroTik login and password.
- 💻 Launch the WinBox utility or open a browser to access the gateway IP address.
- 📝 Write down your current settings so you can roll back in case of a configuration error.
⚠️ Warning: If you change settings remotely via a wireless network, any incorrect action in the security section will immediately disconnect the connection. Access can only be restored by rebooting the router or resetting the settings.
Modern versions of RouterOS have an improved interface, but the profile logic remains the same. It's important not to confuse the router password (used to access settings) with the Wi-Fi network password (encryption key). We'll be changing the latter, which is used by client devices to connect.
Changing your password using the WinBox utility
Utility WinBox is the primary tool for administering MikroTik equipment and provides the most comprehensive access to all system parameters. After connecting to the router, navigate to the menu section responsible for wireless interfaces. This item is labeled in the left navigation panel as Wireless.
In the window that opens, you will see a list of all available radio interfaces (for example, wlan1, wlan2). To make changes, double-click the desired interface. A configuration dialog box will open, where we are interested in the tab Wireless, and specifically the field Security ProfileThis is where the security profile containing the encryption key is linked.
/interface wireless
set [ find default-name=wlan1 ] security-profile=profile-name
Click the ellipsis (...) button next to the security profile name. In the window that opens Security Profiles select the active profile (usually it is called default or has a custom name) and click the "Edit" button. In the line WPA2 Pre-Shared Key Enter a new complex password. After applying the changes (OK And Apply) all devices will be disabled and will need to be re-authorized.
☑️ Check before changing your password in WinBox
It's worth noting that the interface may have undergone some visual changes in RouterOS v7, but the logical structure remains unchanged. If you have multiple SSIDs configured on a single physical interface (virtual APs), make sure you change the password in the correct profile associated with the desired virtual interface.
Changing the access key via WebFig
Web interface WebFig It's convenient because it doesn't require any additional software and is accessible from any device with a browser. To get started, enter your router's IP address in the address bar and log in. Once logged in, you'll be taken to the main dashboard, where you'll find the section Wireless in the top or side menu.
In the list of interfaces, select the one that distributes Wi-Fi (the status should be enabled And running). Go to the tab Wireless and find the drop-down list Security ProfileBy clicking on the profile name, you will be taken to the security profile management menu. Here, in the field WPA2 Pre-Shared Key, a new password is entered for your network.
- 🌐 Open your browser and enter the gateway IP address (often 192.168.88.1).
- 🔐 Log in using your administrator credentials.
- 📶 Go to the Wireless menu and select the desired interface.
- 🛡️ Open Security Profile settings and update the WPA2 key.
After entering a new value, be sure to press the button OK, and then Apply in the main interface window. The system will apply the changes immediately. If you're using a dual-band router, keep in mind that the profiles for 2.4 GHz and 5 GHz may be different and need to be updated separately unless they're grouped together.
⚠️ Note: The WebFig interface may be slower than WinBox, especially on older router models when loading heavy pages. Do not interrupt the settings saving process while waiting for the server's response.
What should I do if WebFig won't open?
If the web interface is unavailable, check whether the HTTP or HTTPS service is enabled under IP -> Services. The port may have been changed from the standard 80 to another, or the service may have been disabled entirely for security reasons.
Setting up security and encryption profiles
A key element of wireless network security in the MikroTik ecosystem is Security ProfileThis is a configuration object that defines not only the password but also encryption algorithms, authentication modes, and other security parameters. Understanding how profiles work allows for flexible access management for different user groups.
In the profile editing window, you can select the operating mode. For home and most office networks, the optimal choice is dynamic keys using WPA2 or WPA3Older protocols such as WEP or WPA-TKIP are considered obsolete and vulnerable, and their use is not recommended unless you have specific legacy hardware.
When setting up, it is important to pay attention to the field Authentication TypesHere you can choose combinations, for example, WPA2 PSKIf you plan to use corporate authentication via a RADIUS server, the settings will be different and will require specifying the addresses of the authentication servers, but for a simple password change, the pre-shared key mode is sufficient.
| Parameter | Recommended value | Description |
|---|---|---|
| Mode | ap bridge | Access point operating mode |
| Security Profile | Custom/Default | Profile name with keys |
| WPA2 Pre-Shared Key | Complex password | Access key for clients |
| Encryption | CCMP (AES) | Traffic encryption algorithm |
You can also configure a Group Key Update feature in the security profile, which forces encryption keys to change at specified intervals. This improves cryptographic strength, but can put a strain on the router's processor and cause brief connection interruptions for clients.
Using the command line (Terminal)
For experienced users and process automation, the most efficient way to change settings is to use the terminal. The command line in MikroTik (CLI) allows you to make changes instantly and script actions. Access to the terminal is the same as in WinBox (button New Terminal), and via SSH.
To change the password, you need to know the interface name and the security profile name. The command has the following structure: first, the path to the wireless interface configuration is specified, followed by the command set and parameters. If the profile hasn't yet been created, you can create it with a separate command or add it through the interface.
/interface wireless security-profiles
set [ find name=default ] authentication-types=wpa2-psk mode=dynamic-keys wpa2-pre-shared-key="NewStrongPassword123!"
You can combine commands into a single script to quickly reset and install new settings. This is especially useful for mass deployment of configurations across multiple access points. However, be extremely careful with syntax: one extra space or incorrect quote can cause a syntax error.
- 💻 Open a terminal in WinBox or connect via SSH.
- 📝 Enter the command to switch to the security-profiles context.
- 🔑 Use the set command to update the wpa2-pre-shared-key field.
- ✅ Check the result with the print command to make sure it was applied.
Using the CLI also allows you to quickly check which clients are currently connected to the network using the command /interface wireless monitorThis helps assess the impact of a password change on current user load and activity in real time.
Common mistakes and troubleshooting
When changing a password, users often encounter a situation where devices cannot connect to the network even after entering the correct data. Most often, the problem lies in the encryption type mismatch. If the router is set to WPA2, and the client device tries to connect via the protocol WPA (or vice versa), authorization will not work.
Another common mistake is entering a case-sensitive password. The MikroTik system is case-sensitive. Pre-Shared KeyMake sure that the client device (smartphone, laptop) does not have automatic case correction or character hiding enabled, which could lead to typos.
⚠️ Important: If the router stops responding to requests or Wi-Fi is completely lost after changing the password, the device may have entered a reboot loop due to a configuration error. In this case, a hard reset (reset button on the device) will help.
It is also worth checking if your device's MAC address is blocked in the list. Access ListMikroTik has a whitelist and blacklist mechanism that takes precedence over the correctness of the password entered. If your address is blacklisted or not whitelisted (under a strict policy), access will be denied regardless of the key.
Why isn't WPA3 working?
The WPA3 protocol requires support from client devices. Older smartphones and laptops (manufactured before 2018-2019) may simply not see the network or refuse to connect if "WPA3 only" mode is enabled. Use WPA2/WPA3 mixed mode for compatibility.
Frequently Asked Questions (FAQ)
How do I reset my password if I forgot my current Wi-Fi key?
If you've forgotten your password but have access to the router via cable or know the administrator password, you can view the current key in the Security Profile settings in WinBox or WebFig. It's displayed in plain text by clicking the entry field. If access is completely lost, a full reset of the device using the Reset button will help.
Do I need to reboot my router after changing the password?
No, changes to wireless network settings in the MikroTik system are applied instantly. A reboot is not required, but all connected clients will be disconnected and will be required to re-authenticate with the new password.
Is it possible to set different passwords for 2.4 GHz and 5 GHz?
Yes, this is possible. To do this, you need to create two different Security Profiles with different passwords and bind one profile to the 2.4 GHz interface and the other to the 5 GHz interface in the Wireless settings.
What is the minimum password length recommended for WPA2?
The WPA2 standard requires a minimum of 8 characters, but for true security, it is recommended to use passwords that are 12-15 characters long and include mixed-case letters, numbers, and special characters.
Does changing your password affect your internet speed?
Changing your password itself doesn't affect speed. However, if you accidentally change the channel width or frequency to a less clear one during setup, speed may drop. Be careful when editing adjacent fields.