Almost every home fibre connection comes with one device from the provider: an ONT that is also the router and Wi-Fi transmitter. Underneath is a label with the admin page address, a username, and a password.

Many customers never open that page. Those who do are often puzzled: some menus are missing, or present but impossible to change. Both have the same explanation.

Two levels of account

Provider routers generally hold at least two accounts:

  • The user account. The one on the label or given by the technician. It can change the Wi-Fi name and password, see connected devices, and adjust a few basic settings.
  • The full admin account. Held by the provider. It can change the connection to the provider's network, phone and TV services, and firmware updates.

On top of that, many providers can manage the router remotely through a dedicated management protocol. That is how an agent can change your Wi-Fi password while you are on the phone, or update firmware without a visit.

Why the default password needs changing

The password on the label is often the same across a whole model, or generated to a guessable pattern. Anyone connected to your Wi-Fi, guests, a neighbour once given the password, a compromised smart device, can open the admin page with it.

From there, that person can read the Wi-Fi password, change DNS so you are sent to fake sites, or open ports that expose devices in the home to the internet.

What you can do with the user account

  • Change the admin password if the menu is available. Keep it somewhere safe, because resetting the router restores the default.
  • Change the default Wi-Fi name and password. Default names often reveal the brand and model, which helps attackers look up flaws.
  • Turn off WPS if the option exists. The reasons are in the guide to WPS being convenient but risky.
  • Check the connected device list occasionally for devices you don't recognise.
  • Make sure admin access from the internet is off, if that setting is visible.

When the menu you need is locked

Hunting for the full admin password on forums is tempting but the wrong path. The device usually belongs to the provider, a wrong change can cut internet, phone, or TV, and the provider can restore its settings remotely at any time.

There are two better routes:

  • Ask the provider. Some settings, such as port forwarding or bridge mode, can be enabled on request.
  • Put your own router behind it. The provider's router still handles the connection, while Wi-Fi, parental controls, and other settings are managed on a router you own with full rights. Turn off Wi-Fi on the provider's router so two networks don't compete.

The second route also means a router fully under your control, including the duty to keep its firmware updated yourself.

A provider's router has a user account for you and a full account for the provider. Change the default admin and Wi-Fi passwords, turn off WPS, and check connected devices. If you need more control, ask the provider or put your own router behind it, don't break locks that aren't yours.

Frequently asked questions

Why can't I open every menu on my provider's router?

The account given to customers is usually a user account with limited rights. Menus such as the connection to the provider are locked so the service is not broken by a wrong setting. The full-rights account is held by the provider.

Is it safe to look up the superadmin password online?

Not advisable. Changing locked settings can cut the service, and the device usually belongs to the provider. If you need a particular feature, ask the provider to enable it or put your own router behind it.

What should be changed first on a provider's router?

The admin password you are able to change, the default Wi-Fi name and password, then turn off WPS if available. All three can be done with an ordinary user account on most devices.