Default Router IP Addresses
Default gateway IP and login credentials for every major router brand. Plus how to find yours when nothing else works.
Default gateway IPs by router brand
Forgot what address your router uses? Bought a used one? Helping a relative? Here's the cheat sheet.
On any computer connected to your network: ipconfig (Windows), ifconfig or ip route (Linux/macOS), or check your phone's WiFi details. The "default gateway" or "router" address is your router's IP, regardless of brand.
| Brand | Default IP | Default username | Default password |
|---|---|---|---|
| Linksys (most) | 192.168.1.1 | admin | admin |
| Linksys (newer Smart WiFi) | 192.168.1.1 | (blank) | admin |
| Netgear (most) | 192.168.1.1 | admin | password |
| Netgear (Nighthawk) | 192.168.1.1 or routerlogin.net | admin | password |
| Netgear Orbi | 192.168.1.1 or orbilogin.com | admin | password |
| ASUS | 192.168.1.1 or router.asus.com | admin | admin |
| TP-Link (most) | 192.168.0.1 or 192.168.1.1 | admin | admin |
| TP-Link (Deco mesh) | tplinkdeco.net | App-managed, no web UI by default | |
| D-Link | 192.168.0.1 | admin | (blank) |
| Belkin | 192.168.2.1 | (blank) | (blank) |
| Apple AirPort | 10.0.1.1 | AirPort Utility on Mac | |
| Google Nest WiFi / Google WiFi | 192.168.86.1 | Google Home app only | |
| eero | 192.168.4.1 | eero app only | |
| Ubiquiti UniFi | 192.168.1.1 or unifi.local | (set during setup) | (set during setup) |
| Ubiquiti EdgeRouter | 192.168.1.1 | ubnt | ubnt |
| MikroTik | 192.168.88.1 | admin | (blank) |
| pfSense / OPNsense | 192.168.1.1 | admin | pfsense / opnsense |
| Verizon FiOS (most) | 192.168.1.1 | admin | password (or sticker) |
| Xfinity / Comcast | 10.0.0.1 | admin | password (or sticker) |
| Spectrum / Charter | 192.168.0.1 | (varies) | (on sticker) |
| AT&T (BGW210, etc.) | 192.168.1.254 | (varies) | (on sticker) |
| CenturyLink | 192.168.0.1 | admin | (on sticker) |
| Cisco (small business) | 192.168.1.1 | cisco | cisco |
Change the default password immediately on any new router. Default credentials are public knowledge — they're literally listed in this article — and bots scan the internet for them constantly. A compromised home router can be conscripted into botnets, used to attack other sites, or have its DNS settings changed to redirect your banking to phishing pages.
If none of these work
The easiest universal method:
- Windows: Open Command Prompt, run
ipconfig. Look for "Default Gateway." - macOS: System Settings → Network → click your active connection → Details → TCP/IP. Or terminal:
route -n get default. - Linux:
ip route show defaultin a terminal. - Android: WiFi settings → tap connected network → Advanced → IP settings show gateway.
- iPhone: Settings → WiFi → tap (i) next to network → "Router" field.
Why every home router uses the same handful of IPs
Home routers ship with default gateway IPs from a small list of RFC 1918 private ranges. There's no technical reason this has to be the case — any private IP would work — but manufacturer conventions have converged on a few common addresses that most home admins recognize. Knowing these makes accessing your router's admin panel much faster when you can't remember what the specific one is.
The vast majority of consumer routers use 192.168.0.1 or 192.168.1.1. This became convention early in the home-router era and never really changed. Enterprise gear more often uses 10.x addresses, and some ISP-provided routers use unusual choices to avoid conflicts with common home LANs the customer might have on the other side.
How to find yours if you don't recognize it from the table
Windows
Open Command Prompt or PowerShell. Run ipconfig. Look for the interface you're connected on (Wireless LAN adapter Wi-Fi, or Ethernet adapter for wired). The "Default Gateway" line shows your router's IP.
macOS
Open Terminal. Run netstat -nr | grep default or route -n get default. The first line shows the default gateway. Alternatively, System Settings > Network > click your active connection > Details > TCP/IP tab shows the router IP.
Linux
Open a terminal. Run ip route show default or ip route | grep default. The output shows the default gateway IP.
iOS
Settings > Wi-Fi > tap the (i) next to your network name. The Router field shows the gateway IP.
Android
Settings > Network & Internet > Internet (or Wi-Fi) > tap your connected network > look for "Gateway" in the details. Location varies by manufacturer skin. Sometimes it's hidden under "Advanced" and sometimes requires tapping the network name twice.
Getting into the admin panel
Once you have the gateway IP, open a web browser and type it in the address bar. Most routers respond on HTTP port 80 (http://192.168.1.1/), though some enterprise gear uses HTTPS (https://192.168.1.1/) with a self-signed certificate. Consumer gear increasingly redirects HTTP to HTTPS automatically.
You'll be prompted for a username and password. If you've never changed these, they're either on a label on the router itself or in the manufacturer's default list. Common defaults: admin/admin, admin/password, admin/(no password), root/root, or blank. For ISP-provided routers, the ISP usually printed default credentials on the physical router.
Regardless of what the default is, change it. Immediately. Default credentials on a router that anyone in your house can reach are a security issue; default credentials on a router that's exposed to the internet (some ISP configurations enable remote management) are a serious security issue.
What to actually do once you're in the admin panel
Change the admin password
First and most important. Pick something unique and store it in a password manager.
Check the firmware version
If it's out of date, update. Router vulnerabilities are common and firmware updates fix them. Many consumer routers have automatic update options — enable them.
Set the WiFi password
WPA3 if your router and clients support it. WPA2 (AES) as a fallback for older clients. Never use WEP (broken since 2001) or WPA-TKIP (broken since 2009).
Disable WPS
WiFi Protected Setup, the "press a button to connect" feature, has known vulnerabilities in most implementations. Disable it unless you specifically need it.
Set up a guest network
Isolates visitors' devices from your main network. Useful for keeping IoT devices, contractors, and visitors from having lateral access to your personal machines.
Disable UPnP if you don't need it
UPnP (Universal Plug and Play) lets applications on your LAN automatically open ports on the router. Convenient for gaming and some applications, but a security risk because compromised devices can use it to make themselves reachable. If you're not actively using something that needs it, disable it.
Set the DNS servers
Many ISP routers use the ISP's DNS by default, which is often slow and sometimes injects tracking. Consider setting the router to use Cloudflare (1.1.1.1) or Google (8.8.8.8) or Quad9 (9.9.9.9) instead. Every device on the network then uses the better DNS automatically.
When default gateway IPs collide
Working on a friend's network
You're at someone's house with your laptop, both networks use 192.168.1.0/24, and both routers are at 192.168.1.1. If you're on their WiFi, everything works normally. If you're on their WiFi and connected to your own VPN, the routing can get weird because your VPN might try to route traffic destined for 192.168.1.1 to your home network. Different endpoints for the WiFi and VPN help avoid this.
Site-to-site VPN between two locations that use the same subnet
If both offices use 192.168.1.0/24, you can't route traffic between them via VPN without NAT. The addresses overlap. Solutions: renumber one side, use NAT-over-VPN, or use identity-based routing that maps to different apparent subnets.
Guest networks that overlap main networks
Some routers put guest networks on the same subnet as the main network by default, which defeats the isolation purpose. Guest networks should be on a completely different subnet from the main network — usually the router's guest feature does this correctly, but check.
Enterprise routers use different conventions
UniFi, MikroTik, Cisco, Aruba, Juniper, and other enterprise brands usually default to 192.168.1.1 for initial setup but expect the operator to change it during configuration. Enterprise deployments typically use 10.x subnets because they scale further — 10.0.0.0/8 has 16.7 million addresses versus 192.168.0.0/16's 65,536 — and because there's more room for planned subnet allocations.
UniFi Dream Machine defaults to 192.168.1.1 out of the box but many operators (including me) reconfigure to 10.x. My homelab uses 10.1.1.1 for the primary gateway.
Related tools
The Private IP Ranges reference shows all the RFC 1918 blocks and other reserved ranges. The Subnet Calculator and CIDR Range Tool handle the math for carving up private address space. The IP Lookup tool tells you what your public IP is (the address the internet sees you at, not the router's internal IP).