For most home routers, the network configuration page loads at 192.168.1.1 or 192.168.0.1, and the brand table below confirms which one applies to your device. Try one, and if it times out, try the other while you're connected to that router.
You're probably here because something small turned urgent. A new printer won't stay online, a game wants an open port, or you need to change a Wi-Fi password you've handed out too many times. You type an address, get a login box, and realize you don't know which password it wants.
Treat that page as more than a place to rename Wi-Fi. It's the administrative control panel for your whole home network. Change the wrong field and you can lock yourself out, knock every device offline, or leave a door open to the internet. Work in a safe order, save a way back, and it's a calm, ten minute job.
Default Addresses for Common Routers and Modems
Start with 192.168.1.1 and 192.168.0.1. Those two cover most home routers you'll run into. Type one into your browser's address bar, not a search box, and press Enter. If you get a login prompt, you're in the right place.
That address is the router's local gateway IP, its address inside your home. It works only while your phone or computer is connected to that router by Wi-Fi or Ethernet. It won't load over cellular data, and it shouldn't load from outside your home at all.
The Defaults Most Brands Ship With
Manufacturers reuse the same handful of addresses across whole product lines. That makes guessing reasonable, but confirming is better. I would check the table, then check the device itself before you start trying passwords.
| Brand or device | Common default address | Where to confirm it |
| Linksys | 192.168.1.1 | Sticker on the router or Linksys setup guide |
| Netgear | 192.168.1.1 | Sticker on the router, model number |
| TP-Link | 192.168.0.1 | Label on the bottom of the router |
| ASUS | 192.168.1.1 | Quick Start Guide or router label |
| D-Link | 192.168.0.1 | Label on the bottom of the router |
| Belkin | 192.168.2.1 | Router label or manual |
| Xfinity gateway | 10.0.0.1 | Gateway label or ISP account page |
| Cable modem (common ISP models) | 192.168.100.1 | Modem label or ISP documentation |
| Any other router | Read it from your device | Default gateway from ipconfig, route or Network settings |
The sticker on the bottom is your best source. It often prints the address, admin username, and admin password together, sometimes next to the serial number. If the sticker's worn or missing, the manual or support page for your exact model lists the same defaults.
Why a Modem Address Is Not the Same Thing
Cable setups trip people up because there can be two boxes and two pages. Many ISP gateways use 10.0.0.1, and many standalone cable modems answer at 192.168.100.1. That modem page usually shows signal levels and connection status. It usually cannot change your Wi-Fi name or password because the modem isn't running your Wi-Fi.
Practical rule: If a page shows signal strength and channels but no wireless settings anywhere, you're looking at the modem, not the router behind it.
One more catch is worth knowing before you blame the table. Owners can change the default address, and some do, often to avoid a conflict with another router. So a correct looking address that fails may be a custom address someone set years ago.
If your brand isn't listed, the sticker is gone, or both common addresses time out, stop guessing. Your computer or phone already knows the right number, and you can read it directly.
How to Read the Gateway Address on Any Device
Your device needs to know where to send traffic that leaves your home. The device that handles that job is the default gateway, and in a typical home that's the router. That's why the gateway address is almost always the network configuration page, whatever brand is printed on the box.
You don't need an app for this. Every major platform shows the value in its own network settings, and it takes under a minute once you know where to look.
Here's the Windows route at a glance.
Windows and macOS
- Windows: Open Command Prompt, type
ipconfig, and press Enter. Find your active Wi-Fi or Ethernet adapter in the results. The Default Gateway line under that adapter is the address you want. - macOS: Open System Settings and go to Wi-Fi. Click Details next to your connected network, then open the TCP/IP tab. The Router field shows the address.
On Windows, ignore adapters you aren't using. Old virtual adapters and disconnected Ethernet entries often show blank gateway lines, and people copy the wrong block. Look for the adapter that also shows a current IPv4 address.
iPhone and Android
- iPhone: Open Settings, tap Wi-Fi, then tap the info icon next to your connected network. Scroll to the IPv4 Address section and read the Router value.
- Android: Open Settings, go to your Wi-Fi or connections screen, and open the details for the connected network. Look for a field labeled Gateway or Router. The exact menu names shift between manufacturers, but the value sits on that details screen.
The gateway value only helps if you're connected to the right network. Check it from your main home Wi-Fi, not a guest network, a hotspot, or cellular data.
The Mesh and Extender Trap
Mesh systems and range extenders cause a specific confusion. If you're connected through a mesh node or extender, some screens surface that node's own address rather than the main router's. You'll end up on a page that looks unfamiliar, has fewer settings, or belongs to a different brand than you expected.
If that happens, move near the main unit, reconnect, and read the gateway again. Better yet, plug a laptop into the main router with an Ethernet cable. A wired connection removes the guesswork about which box you're talking to.
Finish with a simple test. Type the address into a browser on the same network, with nothing before or after it. You should get a login prompt, not a page of search results. If the browser searches instead, you typed it into the wrong field, which is an easy fix covered next.
Fixing Login Errors and Lost Router Passwords
The most common login failure isn't a broken router. It's the wrong password in the right box. Routers have two separate passwords, and they do different jobs. The Wi-Fi password lets a device join your network. The admin password lets a person change the router's settings, and that's the one the configuration page wants.
People type the Wi-Fi key into the admin field constantly, because it's the password they use every day. If yours is rejected, check the label for a separate admin password before you try anything drastic. Many newer routers print a unique one there.
Matching the Symptom to the Fix
| Symptom | Likely cause | Fix |
| Password rejected | Wi-Fi key entered instead of admin password | Try the admin password from the label; check the router's default username |
| Page times out | Device is on a guest network, VPN or mesh node | Reconnect to the main router's network, then retry the address |
| Browser searches instead of loading | Address typed into the search bar | Enter the address in the address bar with http:// in front |
| Page loads but then fails | IP conflict with another device | Restart the router, then reconnect the affected device |
| Admin password forgotten | Password changed during earlier setup | Factory reset with the reset button, then set the router up again |
| Page blocked by security warning | Certificate or HTTPS mismatch on local page | Use the local address directly; avoid saved DNS overrides |
A page that won't load at all usually means you're not on the main router's network. Guest networks often block access to the admin page on purpose, and a VPN can route your request away from your local network entirely. Turn the VPN off, join your main Wi-Fi, and retry before you change anything else.
An IP conflict is the quieter problem. That's when another device is holding the same address your router expects to use, so requests go nowhere or the page drops mid load. Restarting the router forces devices to request fresh addresses, which clears most conflicts without any settings changes.
When a Factory Reset Is the Only Way Back
If the admin password was changed and nobody remembers it, there's no recovery email and no alternate access. The practical solution is a factory reset: hold the recessed reset button for about 10 to 30 seconds until the lights cycle, then set the router up from scratch with the defaults on the label.
A reset erases your Wi-Fi name, Wi-Fi password, port forwards, and DHCP reservations. It's a rebuild, not a password reminder, so save it for when nothing else works.
Most fixes in the table take a minute. A reset means reconnecting every phone, TV, and smart bulb in the house. Before you ever need one, store the new admin password somewhere you control, such as KeePassXC, which you can set up by following a guide to exporting Chrome passwords to KeePassXC safely. Write it down before a reset, not after.
Basic Settings for Wi-Fi, DHCP and Port Forwarding
Work through this menu from lowest risk to highest. The settings people change are the Wi-Fi network name (SSID), the Wi-Fi password, the channel, and the band, meaning 2.4 GHz for range or 5 GHz for speed at shorter distance. Change the name or password and every device gets logged out at once, so have the new key written down and ready before you hit Save.
This is how the wireless screen usually appears while you're working in it.
DHCP, Ranges, and Reservations
DHCP is the service that hands an address to each device when it joins. The DHCP range is the pool it hands out from, and the lease time is how long a device keeps its address before checking in again. A common default lease is 24 hours, which suits most homes fine.
A DHCP reservation pins one device to a fixed address while everything else stays automatic. Use it for a printer, a home server, or a network drive that other devices need to find at the same address every time. Reserve the address first, then change anything that points at that device.
What Each Setting Costs You If It Goes Wrong
| Setting | Usually found under | What it controls | Change risk |
| Wi-Fi name and password | Wireless | Network name and key for joining | Low: devices must rejoin |
| Channel and band | Wireless | Radio channel and 2.4 GHz or 5 GHz selection | Low: may improve speed or interference |
| DHCP range | LAN or Network | Pool of addresses handed to devices | Medium: can cause IP conflicts |
| DHCP reservation | LAN or DHCP | Fixed address for one device | Low: reserve before changing ranges |
| IPv6 mode (SLAAC or DHCPv6) | IPv6 or WAN | How devices get IPv6 addresses | Medium: keep default unless needed |
| Port forwarding | NAT, Virtual Server or Port Forwarding | Opens an inbound port to one LAN device | High: exposes the device to the internet |
| DNS server | WAN or Internet | Resolver devices use for name lookups | Medium: custom DNS can bypass filtering |
Port Forwarding Is the One to Respect
Port forwarding opens a specific port from the internet straight to one device on your home network. That's sometimes necessary for a game server or a camera system, but it also means strangers can knock on that device directly. I would use it only for a service that needs it, reserve that device's address first, and delete the rule when you stop using the service.
Watch the walkthrough below before you save your first rule, so you can see where the internal address and port fields sit.
IPv6 and DNS Need a Light Touch
Your page may offer SLAAC, DHCPv6, or both. As the HPC IPv6 knowledge base page on DHCP and SLAAC explains, DHCPv6 can operate either alongside SLAAC or in place of it, with stateless DHCPv6 providing additional network information while hosts form addresses through SLAAC and stateful DHCPv6 assigning addresses through server managed leases. So a single menu labeled DHCP can hide very different behavior. Keep the default unless your ISP or a specific device requires a change.
The DNS server field usually sits under WAN or Internet and fills in automatically from your ISP. Leave it automatic unless you have a clear reason, because a custom resolver can bypass filtering you set up elsewhere. If your firmware offers DNS over HTTPS or DNS over TLS, enable them only if your devices work well with them. Keep IPv6 DNS consistent with IPv4 DNS so lookups don't split across resolvers, and remember that devices with hard coded DNS will bypass the router no matter what you set here.
Whatever you change, change one setting at a time. Save, test, then move on. If something breaks, you'll know exactly which field did it.
Hardening the Page Against Outside Access
A network configuration page reachable from the internet isn't a convenience. It's an open door to your whole network, because anyone who gets past that login can reroute your traffic, open ports, and change your DNS. CISA guidance on securing network infrastructure devices recommends segmenting networks, restricting remote administration, using strong password protection, backing up configurations offline, applying device updates, periodically testing security settings, and protecting configuration files with encryption or access controls.
Work through these steps in order. The order matters, because the first step is your way back if a later one goes wrong.
The Eight Step Routine
- Save a recovery copy first: Export the current configuration to a file and keep it offline, on a USB stick or an encrypted folder. Mistake to avoid: skipping this because everything works right now. That's exactly when the copy is worth having.
- Change the default admin password: Use a long, unique passphrase and store it in a password manager. Defaults are printed in manuals anyone can download. Don't reuse your Wi-Fi password here.
- Turn off remote or WAN side administration: This setting may be labeled Remote Management or Web Access from WAN. The usual mistake is enabling it to fix something from work, then forgetting it's on for two years.
- Restrict who can reach the page locally: Limit management access to a wired connection or a trusted, guest free network segment where your router supports it. Guests and smart TVs never need a path to your settings.
- Update the firmware and enable automatic updates: Firmware fixes close known holes in the page itself. If your model offers automatic updates, turn them on so you aren't relying on remembering.
- Disable UPnP unless something requires it: UPnP lets devices and apps open ports on their own, without asking you. Leave it off, and only switch it on if a game console or app stops working because of it.
- Turn off WPS: The push button and PIN methods behind WPS have known weaknesses, and you don't need them now that you can type or share the Wi-Fi password directly.
- Review every port forward and delete stale rules: Old rules for cameras you replaced and servers you shut down stay open forever unless you remove them. If you don't recognize a rule, disable it and see what complains.
Straight answers: More enabled features doesn't mean more safety. Every service you switch on and don't use is extra attack surface someone else can test.
While you're checking settings, it's worth confirming your signal isn't pushing farther than you think. Tools that map signal strength around your home, like the ones covered in a look at Samsung hidden Wi-Fi tools for finding weak spots, can show you how far your network is visible outside your walls.
Finish with the test that proves the point. Turn off Wi-Fi on your phone so it's on cellular data, then try to load your router's public address. It should fail. If the login page loads from outside your home, remote administration is still on somewhere, and you need to find it before you stop.
Confirming Changes and Saving Your Recovery Copy
Run this check only after the hardening steps are done, and give it about ten minutes. You're confirming that what you intended is what's live, a step that's easy to skip. In a 2022 survey of 4,500 IT professionals across North America, 45.2% did not claim complete knowledge of their network configuration, according to the Auvik 2023 Network IT Management Report. A short check keeps you out of that group at home.
- Rejoin with a phone: Connect to the Wi-Fi network using the new password and load a few sites.
- Log in while wired: From a computer on Ethernet, open the gateway address and sign in with the new admin password.
- Audit the lists: Compare your DHCP reservations and port forwards against devices you still own, and remove stale entries.
- Test any forwarded service: If a port forward exists, confirm that one service still works from outside as intended.
- Reboot and repeat: Restart the router once, then repeat the checks above, since some changes only take effect after a restart.
- Store the pair together: Keep the recovery copy and the admin password in the same offline place.
One decision point matters here. If your ISP supplied the router, ask before changing WAN or IPv6 settings, because some ISP managed gateways revert local changes after firmware updates. You don't want to debug a setting the provider overwrote overnight.
The recovery copy is the habit that makes every future change reversible. Keep it current, and the network configuration page stops being a place you're afraid to touch.
NeoTeo publishes practical guides on networking, security, hardware, and software, including router setup walkthroughs that go past the login screen and into the settings that keep a home network closed to outsiders. If this one saved you a factory reset, visit NeoTeo for more hands on tutorials you can follow with the device in front of you.
