MikroTik Router Login

MikroTik is a networking equipment manufacturer operated by SIA Mikrotikls, a company based in Riga, Latvia. The brand serves a niche between consumer and enterprise networking, offering carrier-grade features at prices well below Cisco or Juniper. Its routers are a standard choice for wireless ISPs (WISPs) and network professionals worldwide.

How to Login to Your MikroTik Router

MikroTik routers use 192.168.88.1 as the default IP address. This is a unique subnet that avoids conflicts with most other routers, which typically default to 192.168.1.1. Type the IP address in your browser to access WebFig, the built-in web management interface.

Enter admin as the username. On RouterOS versions before 6.43, the default password is admin. On version 6.43 and newer, the password field is blank. The first login on newer firmware prompts you to create a password immediately.

WebFig is not the only way to manage these routers. WinBox is a dedicated desktop application available for Windows (and through Wine on macOS and Linux). Download it from the official MikroTik website. WinBox can discover routers on the local network by MAC address, which means it works even if you do not know the IP address or if the router has no IP assigned yet.

For command-line access, connect via SSH or Telnet to 192.168.88.1. The CLI uses a hierarchical slash-separated path structure. Type /interface print to list all interfaces or /ip address print to see configured addresses.

MikroTik Default Credentials by Model

Factory defaults vary slightly between product lines, though most follow the same pattern.

Model	Default IP	Username	Password	Category
hAP ac3	192.168.88.1	admin	blank	Home/SOHO
hAP ax2	192.168.88.1	admin	blank	Home WiFi 6
hAP ac lite	192.168.88.1	admin	blank	Budget home
RB4011iGS+	192.168.88.1	admin	blank	Rackmount router
CCR2004-1G-12S+2XS	192.168.88.1	admin	blank	Enterprise core
CRS326-24G-2S+	192.168.88.1	admin	blank	Managed switch
hEX S (RB760iGS)	192.168.88.1	admin	blank	Wired router

All models default to the same 192.168.88.1 gateway. Devices running RouterOS 6.42 or older use admin as the password instead of blank.

Setting Up a MikroTik Router

Connect your internet source (modem or ONT) to the ether1 port, which serves as the WAN port by default. Connect your computer to any other Ethernet port (ether2 through ether5 on most hAP models). Power on the device and wait 30 seconds for RouterOS to boot.

Open WinBox or go to 192.168.88.1 in a browser. The default configuration on home models includes a DHCP client on ether1, a DHCP server on the LAN bridge, NAT masquerading, and basic firewall rules. For most home users, internet works immediately after connecting the WAN cable.

For custom configurations, the QuickSet page in WebFig provides a simplified interface. Select your mode (Home AP, WISP Bridge, or CPE) and fill in the wireless and WAN settings. QuickSet generates the underlying RouterOS configuration automatically.

Advanced users skip QuickSet entirely and configure through the CLI or WinBox menus. RouterOS exposes every protocol and feature individually. This granularity is why network engineers favor the platform, but it also means misconfiguration is easy without networking knowledge.

Changing Your Wi-Fi Password

In WebFig, go to Wireless > Security Profiles. Click the default security profile. Change the WPA2 Pre-Shared Key field to your new password. Click OK to apply.

In WinBox, go to the same path: Wireless > Security Profiles tab. Double-click the active profile and update the passphrase.

Via CLI, run: /interface wireless security-profiles set default wpa2-pre-shared-key=YourNewPassword. The wireless radio restarts automatically. All connected devices will need to reconnect with the new credentials.

RouterOS supports separate security profiles per SSID if you run multiple wireless networks (such as a guest network on a virtual AP). Each virtual AP can reference a different security profile with its own password.

RouterOS Features and Licensing

RouterOS uses a license tier system from Level 0 (demo) to Level 6 (controller). Each hardware product ships with a specific license level. The hAP series includes Level 4, which covers home and SOHO use. CCR devices ship with Level 6.

Key features include bandwidth management with queues, VPN server support (OpenVPN, L2TP, IPsec, WireGuard on v7+), VLAN tagging, MPLS, BGP routing, and the Dude network monitoring tool. The firewall uses iptables-style chain rules with connection tracking.

RouterOS version 7 introduced WireGuard VPN and container support for running Docker containers directly on the router. Port forwarding uses NAT dst-nat rules in WebFig under IP > Firewall > NAT.

Troubleshooting MikroTik Router Login

1. Cannot reach 192.168.88.1 in a browser. Make sure you are connected to a LAN port (ether2-ether5), not the WAN port (ether1). If the router has been reconfigured, the IP address may have changed. Use WinBox with MAC discovery to find and connect to the device regardless of its IP configuration.

2. WinBox cannot find the router. WinBox uses a broadcast protocol for discovery. This fails across VLANs or through other routers. Connect your computer directly to the device with an Ethernet cable. Disable any VPN software on your computer that might block local broadcast traffic.

3. Admin password rejected. If the password was changed and you do not remember it, hold the reset button during power-on for 5 seconds. This restores the default configuration. On certain models, a longer hold (10+ seconds) enters Netinstall mode for a full OS reinstall.

4. WebFig loads but is very slow. WebFig can be sluggish on lower-end models with many firewall rules or active connections. Use WinBox instead, which is significantly faster because it uses a binary protocol rather than HTTP. CLI via SSH is the fastest option.

5. Router has no default configuration after reset. Some models (particularly CRS switches and CCR routers) ship without a default configuration. After reset, connect via WinBox MAC discovery and configure from scratch.