• May 28, 2022, 04:03:37 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: default administrator credentials  (Read 2768 times)

Shade_Of_Fear

  • Level 1 Member
  • *
  • Posts: 2
default administrator credentials
« on: December 11, 2014, 06:18:56 AM »


The auto log out and Admin log in user name features is a security policy held by D-Link and it's how they implement there security on all D-Link routers and I presume will not be changed anytime soon.



Hello,

I recently bought DIR-605L, Hardware Version : B1, Firmware Version : 2.04. I was happy user of DIR-615.
When I set up a router the first thing I usually do is to change the default administrator credentials. However I was "greeted" by the fact that the administrator name is greyed out to "admin". After that I went to the Maintenance section to try again - but NO. I am not allowed to secure my new DIR-605L router.

I've made research on the internet but I found very little information. Mostly that D-Link chose to disable the ability to change the user name for security reasons.

Can I ask what and how does this contribute to the enhance of the security of the router?
Now a potential attacker only needs to guess one field - the password instead of two fields - the administrator name AND the password.

I am very dissatisfied with this and I will think next time before I buy another D-Link router for home use.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49906
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: default administrator credentials
« Reply #1 on: December 11, 2014, 07:16:57 AM »

Link>Welcome!

  • What region are you located?

Most DIR series routers have just the Admin user account and going forward into new generation routers, only Admin seems to be available. Some older routers have the ability to support a "User" account. However now days with people doing bad things with routers and trying to do bad things, I presume D-Link and other Mfrs are taking the stance that only 1 or 2 people need access to the router and having any additional accounts on the router is a security risk and not necessary. Most home class routers need only minimal set up and configuration and maintenance over the life span and should only be accessed by 1 or 2 authorized users who configure and manage the router. This action would be the result of people complaining about the safety and security of the router. So this maybe why just he Admin only account is supported.

The router IS secure when users set up the router and set up the routers log in PW. Thats all thats really needed. Its up to the owner of the router to maintain and only let himself or grant authorized users access.

Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

Shade_Of_Fear

  • Level 1 Member
  • *
  • Posts: 2
Re: default administrator credentials
« Reply #2 on: December 13, 2014, 06:12:14 AM »

Hello,

Thank you for your reply. I'm located in Bulgaria. I don't think that you understand what I'm complaining for. I don't need many users set up to manage my home device. I just need to change the default administrator name. For example if I enable the router for remote access and if someone somehow connects to my IP and port he will just have to guess the password, because the user name "admin" is already hospitable provided for the attacker. I don't think that I need to buy a professional class router to do somethink so trivial like administrator name change. I honestly think that D-Link disabled the ability to change the name only to ease non-technical consumers to set up their new device and maintain it (remember only one password) so this should lead to reduce of the calls to the support.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49906
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: default administrator credentials
« Reply #3 on: December 13, 2014, 01:06:20 PM »

Like you mentioned, these are home class routers and are designed for the average home users.

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email.

Good Luck.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.