192.168.88.1 — MikroTik Router Admin Login
192.168.88.1 is the factory address on essentially the entire MikroTik range, from a hAP lite on a desk to a CCR in a rack. RouterOS is far more capable than typical home firmware and correspondingly less forgiving, so a little care at the start saves a lot of recovery later.
- MikroTikthe only major user of this address
- adminusername, blank password
- WinBoxthe preferred management tool
- RouterOSthe operating system underneath
Quick answer
Connect to the router and open http://192.168.88.1. The username is admin and, on older RouterOS versions, the password is blank — leave the field empty. RouterOS 6.45 and later force you to set a password on first login instead. WebFig in the browser and WinBox as a desktop application both manage the same device.
Which routers use 192.168.88.1
This is a single-vendor address, but the range behind it spans consumer, prosumer and carrier hardware running the same operating system.
| Brand | Typical models | Username | Password |
|---|---|---|---|
| MikroTik | hAP, hAP ac, hAP ax home routers | admin | (blank on older firmware) |
| MikroTik | RB series routerboards | admin | (blank on older firmware) |
| MikroTik | CRS and CSS switches | admin | (blank on older firmware) |
| MikroTik | CCR cloud core routers | admin | (blank on older firmware) |
| MikroTik | LHG, SXT, wAP wireless units | admin | (blank on older firmware) |
| MikroTik | RouterOS 6.45 and later | admin | Set at first login |
The label on your own unit always overrides this table. For every other brand, see the full credential reference.
How to log in at 192.168.88.1
Use the port marked as the LAN or bridge port. On many models, ether1 is configured as the WAN and will not serve the admin interface.
- 01
Plug into a LAN port, not ether1
MikroTik default configurations reserve ether1 for the internet connection. Connect to any other numbered port, or join the default wireless network on models that have a radio.
- 02
Open WebFig in a browser
Type
http://192.168.88.1. The browser interface is called WebFig and exposes almost everything RouterOS can do, though the layout assumes you know what you are looking for. - 03
Sign in as admin with no password
On firmware before 6.45 the password is genuinely empty. Leave the field untouched. Newer versions present a password creation prompt instead, which must be completed before anything else works.
- 04
Consider WinBox instead
MikroTik free WinBox utility connects over MAC address as well as IP, which means it can reach a router whose addressing you have broken. Anyone planning to change IP settings should have it installed before starting.
- 05
Use Safe Mode before editing
Both WebFig and WinBox offer Safe Mode. With it enabled, any change that costs you your connection is rolled back automatically when the session drops. On RouterOS this is not optional advice.
RouterOS is not home router firmware
MikroTik hardware is priced like consumer equipment and behaves like carrier equipment. RouterOS exposes the firewall, routing table, NAT rules and bridge configuration directly, with no guardrails, which is exactly why network engineers like it and exactly why a first-time user can lose access in a single click.
The most common way that happens is removing or changing the address on the interface you are connected through. There is no confirmation dialogue and no automatic revert. Safe Mode exists precisely for this: enable it, make the change, and if the session drops the router undoes everything from that session on its own. Get into the habit before touching anything on the IP menu.
WinBox is the second safety net. It can find and connect to a MikroTik device by MAC address on the local segment, which means a router with a completely broken IP configuration is still reachable. A browser cannot do that. For anyone doing real configuration work, WinBox is the tool and WebFig is the convenience.
Two more things catch newcomers. First, the default configuration on most models sets ether1 as WAN and bridges the rest, so plugging into the wrong socket produces silence rather than an error. Second, RouterOS 6.45 introduced mandatory password creation on first login, which means guides written before that point describing a blank password no longer match current firmware.
Finally, netinstall exists for genuine disasters. It reflashes a device over the network from a bootable state and recovers routers that no longer respond at all. It also erases everything, so treat it as the end of the road rather than a troubleshooting step.
When 192.168.88.1 will not open
The address does not respond
You are probably plugged into ether1, which is the WAN port in the default configuration. Move the cable to any other numbered port and try again.
The blank password is rejected
The router is running RouterOS 6.45 or later, where a password must be created at first login, or somebody has already set one. Try WinBox by MAC address before resetting.
I lost access after changing an IP address
Open WinBox and connect by MAC address rather than IP. If Safe Mode was enabled, dropping the session already reverted the change.
The router responds to ping but not to the browser
The web service may be disabled or moved to another port under IP then Services. WinBox uses a different port and will usually still connect.
Nothing works at all after a bad configuration
Use netinstall to reflash the device over the network. It restores a working router but erases the entire configuration.
Longer diagnostic sequence: twelve fixes for a router login page that will not load.
Common questions about 192.168.88.1
What is the default password for 192.168.88.1?
On RouterOS versions before 6.45 the username is admin and the password is blank. From 6.45 onward MikroTik requires you to create a password the first time you log in, so there is no default on current firmware.
What is the difference between WebFig and WinBox?
WebFig is the browser interface served from 192.168.88.1. WinBox is a free desktop application that manages the same device and can also connect by MAC address, which lets it reach a router whose IP configuration is broken.
Why does my MikroTik not respond on ether1?
The default configuration treats ether1 as the WAN port and does not serve the admin interface there. Use any other numbered LAN port.
What is Safe Mode?
A RouterOS feature that automatically reverts every change from the current session if your connection drops. It is the main protection against locking yourself out while editing addresses or firewall rules.
How do I reset a MikroTik router?
Hold the reset button while powering the device on until the activity light starts flashing, then release. This restores the default configuration including the 192.168.88.1 address.
What is netinstall for?
Reflashing RouterOS over the network on a device that no longer responds at all. It recovers the router but erases the entire configuration, so it is a last resort.
Not the address you needed?
Read the real gateway off the device in your hand in about twenty seconds, or browse every private IP routers use by default.
Browse every router IP