Secret CSV password file for seamless configuration

Here's another way to deal with the default passwords... in bulk!

[stephanszarafinski]

I did look riduiculous while watching this video in my pyjamas having breakfast, how did you know???

[gorgonbert]

It would be much better for security to make the password on the label readable with a barcode scanner... that way only persons with physical access to the device get the password and can make automations.

[nick]

I was hoping there is an integration of such CSV to winbox ..

[xgamer]

Just do the first boot password less.
Or auto change the admin password with what is on the label after 10 min uptime if not configured.
The current workaround are not good at all

[Raffav]

Why instead of sharing that info with distributors, why not make it tool/process in Account portal in mikrotik site, create a " register" your device schema, after that the default password could be retrieved.

[xgamer]

Not good enough.
Distributor are not trustable beyond selling, expecting anything more from them is going to end up in disappointment.

[bucharestcartraffic]

i have a script for creating an ansible user/password/key and after that, one playbook away from any configuration !

[urZcszyYoTMEDmW]

Why don't you rename the default admin user also? To something admin_XXXX
This would make brute force entirely useless.

[xgamer]

And give us a way to change the default conf without netintall.
Imagine the nightmare after a factory reset on site where you have to ask a secretary to un rack a switch to give you the default password.
Truly that decision will be a nightmare for your customers for a few idiot that don't change default password

[DanielKellner]

You use a secret merch code that contains KNOT like the device, really? 🙂 Sorry don't like the merch styles, don't need anything, but appreciate the shop transparency.

[boumarc]

these unique passwords are such an unnecessary hassle !

[gorgonbert]

Sorry... but how does it make sense to first generate a password for each device to heighten security and then PUBLISH ALL the passwords. This is so dumb i can't even process how dumb it is!!!