Security

Default Credentials

The factory username and password a device ships with, often shared by many units and easy to find online. Change them during setup, because leaving them in place is one of the commonest ways devices are taken over.

How it works

Default credentials are the initial sign-in details supplied with a device or service. They may be shared across many units or unique to one device. Administrator credentials are also different from a Wi-Fi network password, even when both appear in the same setup instructions. Their purpose and scope need separate checks.

A practical example

A router might use a factory administrator login to open its settings while clients connect with a different wireless key. Changing the Wi-Fi key alone does not necessarily change administrator access. A second-hand camera could also retain a former owner’s configured account rather than its original factory login.

What to check

During authorized setup, consult the manufacturer’s instructions, replace any shared default secret and record the owner’s recovery arrangement securely. Check for additional administrator accounts and remote management settings. Confirm whether a factory reset restores the original credentials or starts a new enrollment process before planning maintenance or transferring ownership.

Limits and safe use

Do not try published default passwords against equipment you do not own or administer. A unique factory secret is different from a universal default, but it still needs proper protection. Changing credentials does not update vulnerable firmware or revoke every cloud session automatically. A reset may erase configuration and recordings, so understand its consequences first.

Technical sources

← All glossary terms