How to Log In to Your Router and Change the Admin Password

Your router controls every connection in the house, yet a surprising number of them still sit behind the password printed on a sticker, or worse, behind admin and password. That single credential decides who can change your DNS settings, open ports into your network, read the list of everything you own, or lock you out of your own hardware. Changing the router admin password is the fastest security improvement available to any household, and it costs nothing but a few minutes. This guide covers finding the login page, getting in when you have forgotten the details, choosing a password that holds up, and the handful of settings worth fixing while you are already there.

Two Passwords, Not One

Before anything else, separate two things that people constantly confuse. The Wi-Fi password is what devices type to join the wireless network. The admin password is what you type to log into the router’s settings page. They are entirely different credentials protecting entirely different things.

Changing your Wi-Fi password does nothing to protect the settings interface. Anyone already on the network, including a guest, a smart device that has been compromised, or a neighbour who guessed the Wi-Fi key, can reach the admin page and try the defaults. Because most manufacturers ship the same default admin credentials across an entire model line, and those defaults are published openly, an unchanged admin password is effectively no password at all.

Make them different from each other, too. Reusing the Wi-Fi key as the admin password means handing full control to every visitor you have ever given the wireless password.

Finding Your Router’s Address

1. On Windows, open Command Prompt and run ipconfig. The Default Gateway line is your router’s address.
2. On macOS, open System Settings, then Network, select your active connection, click Details and read the Router field under TCP/IP.
3. On Android, open Wi-Fi settings, tap the connected network and look for Gateway under advanced details.
4. On iPhone, tap the information icon beside your network in Wi-Fi settings and read the Router entry.
5. Check the label. Most routers print the default address, admin username and admin password on a sticker underneath or on the back.

The address is nearly always 192.168.1.1, 192.168.0.1 or 10.0.0.1. Some vendors also publish a friendly hostname such as a routerlogin address that resolves locally. Type it into a browser address bar, not a search box, or you will end up at a search results page instead of your router.

Step by Step: Logging In and Changing the Admin Password

1. Connect to your own network. Wired Ethernet is the most reliable, but Wi-Fi works fine. You cannot reach the admin page from mobile data or from someone else’s connection.
2. Enter the gateway address in a browser. Accept the security warning if the router uses a self-signed certificate, which is normal on local addresses.
3. Log in with current credentials. Try the sticker first. If nothing is printed, common defaults are admin with admin, admin with password, or admin with a blank field.
4. Find the password setting. Look under Administration, System, Management, Advanced or Settings. The option is usually labelled Change Password, Router Password, Admin Password or Login Credentials.
5. Create a strong new password. Aim for at least sixteen characters, unique to this device, ideally generated and stored in a password manager. A passphrase of four or five unrelated words also works well if the field allows spaces.
6. Change the username too, if allowed. Many routers lock the username to admin, but where you can change it, doing so defeats a large share of automated attempts immediately.
7. Save and log back in. Most routers drop your session immediately. Log in with the new credentials to confirm they actually took effect before you close the browser.
8. Record it somewhere durable. A password manager entry is ideal. If you prefer paper, keep the note somewhere physically secure rather than taped to the router.
9. Set the recovery options. Some routers offer security questions or an email recovery address. Fill them in now, while you still have access, and record the answers alongside the password.

When the Default Credentials No Longer Work

You reach the login page, the sticker password is rejected, and nobody in the house remembers changing it. Work through these in order, least destructive first.

Check the obvious sources

Look for a second label, since some units print the admin password separately from the Wi-Fi key. If the router came from your internet provider, the credentials may live in your account portal or their companion app rather than on the device. Ask anyone else in the household who might have set it up.

Try the vendor app

Many modern routers are managed primarily through a phone app tied to a cloud account. If someone registered the router to an account, the app can often reset the local admin password without a factory reset.

Factory reset as the last resort

Every router has a recessed reset button. Hold it with a paperclip for the documented time, commonly ten to thirty seconds, while the unit is powered on. This restores the sticker credentials and the factory defaults.

Understand what a reset costs before pressing. You lose your Wi-Fi network names and passwords, meaning every device in the house must be reconnected. You lose port forwards, DHCP reservations, parental control schedules, guest networks and quality-of-service rules. If your provider configured the connection with specific authentication details, you will need those to get back online. Write down everything you can see in the interface first, even if you cannot log in fully, and have the provider’s support number ready.

Settings Worth Fixing While You Are Logged In

Since you are already in the interface, spend five more minutes closing the other common gaps.

• Disable remote management. Unless you specifically need to administer the router from outside the house, turn off remote access, remote administration or cloud management from the WAN side. This is the single setting that turns a weak password into a genuine internet-facing risk.
• Turn off WPS. The push-button pairing convenience has known weaknesses in some implementations and is rarely needed.
• Check the encryption mode. Use WPA3 if all your devices support it, or WPA2 with AES as the minimum. Anything labelled WEP or TKIP should be changed immediately.
• Review the firmware version and update if one is available, since login-page vulnerabilities are a common patch subject.
• Set up a guest network so visitors and smart devices connect without touching your main network or reaching the admin page.
• Change the default network name if it still advertises the manufacturer and model, which tells an attacker exactly which default credentials to try.

Routers differ enormously in how clearly they expose these controls. Our overview of the key router security features explains what each protection actually does, and the models in our best secure Wi-Fi routers roundup are chosen partly for how sensible their defaults are out of the box.

Common Mistakes to Avoid

The most frequent error is changing the Wi-Fi password, feeling secure, and leaving the admin credentials untouched. The second is picking something short and memorable because the router is only accessed twice a year, which is exactly the reason to store it in a password manager instead of your memory. A third is enabling remote management for convenience and forgetting it is on, which exposes the login page to the entire internet.

Finally, avoid saving router credentials in a browser on a shared family computer while relying on that as your only record. Browsers get cleared, computers get replaced, and the credential vanishes at the exact moment you need it.

Troubleshooting Login Problems

The page will not load at all

Confirm you are on the right network and that you typed the address rather than searching for it. Try a different browser or a private window to rule out cached redirects, and try a wired connection.

The address takes you to a provider portal

Some provider gateways redirect to an account page. Look for a local settings link within it, or use the app your provider supplies.

You are logged in but the option is missing

Some interfaces hide password settings behind an Advanced toggle, and some provider-locked gateways remove them entirely. In the latter case, the provider controls the credential.

The router locks you out after failed attempts

Many units impose a cooldown after several wrong passwords. Wait the stated period rather than power cycling repeatedly, which can extend the lockout.

Frequently Asked Questions

How often should I change the admin password?

A strong unique password does not need routine rotation. Change it if you suspect exposure, after anyone technical has had access, or after a factory reset.

Does changing the admin password disconnect my devices?

No. Devices connect using the Wi-Fi password, which is unaffected. Only your browser session to the settings page is dropped.

Can someone outside my home reach the login page?

Only if remote management is enabled or a port is forwarded to it. With both off, the page is reachable solely from inside the network.

What if my router is provider-supplied and locked down?

Ask the provider whether local admin access can be enabled. If not, consider running your own router behind theirs, or replacing it where the contract allows.

Is a beginner-friendly router easier to secure?

Often yes, because app-driven setup tends to force a unique admin password during installation. Our guide to the best router for beginners covers models that get this right, and the best WPA3 routers and best firewall routers lists go further for households that want stronger protection built in.

Final Thoughts

Finding your gateway address, logging in and setting a long unique admin password is perhaps fifteen minutes of work, and it closes the most commonly overlooked door on a home network. Keep the admin credential distinct from the Wi-Fi key, store it in a password manager rather than your memory, disable remote management, and take the opportunity to check encryption and firmware while you are in the interface. Do that once and record where the details live, and your router stays under your control for the rest of 2026 and beyond, rather than under whoever happened to read the sticker.