cancel
Showing results for 
Search instead for 
Did you mean: 

Router password changes

materialman
Rising Star
Posts: 93
Thanks: 1
Fixes: 1
Registered: 23-07-2013

Router password changes

Recent news about Virgin Media routers not being secure due to people not changing the passwords supplied with the router made be wonder....is it the same for all routers supplied by all ISPs? i.e. should we all be changing our router password and maybe wifi password too? Are they so insecure for some reason?

8 REPLIES
Gel
Pro
Posts: 1,386
Thanks: 133
Fixes: 10
Registered: 02-08-2007

Re: Router password changes

Superuser
Superuser
Posts: 2,518
Thanks: 219
Fixes: 5
Registered: 06-04-2007

Re: Router password changes

I'd say it is always worth changing passwords and wifi SIDs etc..., though I think (though don't know the Virgin Router or too much of their setup, so could be making false assumptions) that the username and password are simple ones by default, such as username admin and the password admin).  Many ISP routers (including Plusnets) have the password different for each router they send out.

198kHz
Seasoned Pro
Posts: 3,217
Thanks: 253
Fixes: 7
Registered: 30-07-2008

Re: Router password changes

IMHO it's good practice with any piece of kit to change anything possible to be different to the default.

Not young enough to know everything
Moderator
Moderator
Posts: 25,773
Thanks: 1,127
Fixes: 47
Registered: 14-04-2007

Re: Router password changes

Moderator Note by Dick (Strat)

Topic moved to a more appropriate board as suggested above.

Customer and Forum Moderator.
Product of the Tyrell Corporation
Community Veteran
Posts: 38,251
Thanks: 937
Fixes: 56
Registered: 15-06-2007

Re: Router password changes

to add some context to this - as I have posted before - the Virgin Media problem was that the Wi-fi PSK password was too short and using very a limited character set thereby leaving it more open to a brute force attack which is what Which used

https://www.theregister.co.uk/2017/06/23/virgin_media_router_security_flap/

Virgin Media stickered default router password is constrained to certain characters, lowering password entropy in the process and making it easier for hackers to mount successful brute force attacks.

"It appears to be that the default Wi-fi PSK is too short. 8 char a-z. Not exactly a new story though," Pen Test Partners' Ken Munro told El Reg. "[It] seems unfair for Which to finger just Virgin, as most ISPs have had weak default PSKs at some point," he added.

Any wifi password is open to a similar attack but the Plusnet one is much harder to crack

HOWEVER

There is one big hole in this security setup  - if your router doesn't have a Guest WiFi option you are giving access to your router to whoever you allow to use your wifi and under these circumstances it is absolutely essential that you change the router admin password to a much more complex one (note that in many cases the default admin password is "admin"

materialman
Rising Star
Posts: 93
Thanks: 1
Fixes: 1
Registered: 23-07-2013

Re: Router password changes


Oldjim wrote:

had weak default PSKs at some point," he added.

Any wifi password is open to a similar attack but the Plusnet one is much harder to crack

HOWEVER

There is one big hole in this security setup  - if your router doesn't have a Guest WiFi option you are giving access to your router to whoever you allow to use your wifi and under these circumstances it is absolutely essential that you change the router admin password to a much more complex one (note that in many cases the default admin password is "admin"


Very good to know Plusnet routers harder to crack.

Err...I don't even know what a Guest wifi option is - unless you mean when you give a visitor to your home the wifi password.

Community Veteran
Posts: 2,919
Thanks: 168
Fixes: 3
Registered: 05-04-2007

Re: Router password changes

I think guest WiFi is usually a segerated area, so say if you had friends coming over who just want to use your internet and nothing else, you could either have it with no password or better with one you give them.

Is used in companies where people have meetings and just need internet access.

I may be wrong, but is less of a risk than using their main WiFi.

Community Veteran
Posts: 38,251
Thanks: 937
Fixes: 56
Registered: 15-06-2007

Re: Router password changes

that is why I use a Billion 8800NL and have set up a completely separate guest wifi network where the users can't access the router and can't see any other connected users