Browse Definitions :
Definition

unique default password

A unique default password is a pre-configured password that is specific to a single device and often printed on a sticker on the device.

Many devices are configured with default passwords that are simple and easy to discover. If unchanged they present a serious security risk for many devices including routers, access points, switches,  firewalls, embedded systems and industrial control systems (ICS). Default passwords are provided by vendors online; many websites also offer compiled lists of default passwords.

Default passwords should be changed the first time they are used but too often that security measure is overlooked. Unique default passwords can provide more security, although that depends on what type of system is used. Randomly generated unique passwords are secure, as long as they aren’t made publicly available.

Unique default passwords also make it simpler and more secure for a user to return a device to default settings. The fact that the password is printed on the device makes it easy for the owner to find it but also ensures that it should only be accessible to someone in the physical location of the hardware.

Some manufacturers have used a sequence of characters from the MAC address or subjected the MAC address to a common algorithm, which negates any security benefit because although the password is unique, it is easily discovered. In the case of a Wi-Fi access point, for example, the MAC address is broadcast, so if the password is based on that, it becomes easily available.

This was last updated in August 2016

Continue Reading About unique default password

SearchCompliance
  • ISO 31000 Risk Management

    The ISO 31000 Risk Management framework is an international standard that provides businesses with guidelines and principles for ...

  • pure risk

    Pure risk refers to risks that are beyond human control and result in a loss or no loss with no possibility of financial gain.

  • risk reporting

    Risk reporting is a method of identifying risks tied to or potentially impacting an organization's business processes.

SearchSecurity
  • Melissa virus

    Melissa was a type of email virus that initially become an issue in early 1999.

  • biometric payment

    Biometric payment is a point-of-sale (POS) technology that uses biometric authentication physical characteristics to identify the...

  • Twofish

    Twofish is a symmetric-key block cipher with a block size of 128 bits and variable-length key of size 128, 192 or 256 bits.

SearchHealthIT
SearchDisasterRecovery
  • What is risk mitigation?

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • fault-tolerant

    Fault-tolerant technology is a capability of a computer system, electronic system or network to deliver uninterrupted service, ...

  • synchronous replication

    Synchronous replication is the process of copying data over a storage area network, local area network or wide area network so ...

SearchStorage
  • hard disk drive (HDD)

    A computer hard disk drive (HDD) is a non-volatile data storage device.

  • Remote Direct Memory Access (RDMA)

    Remote Direct Memory Access (RDMA) is a technology that enables two networked computers to exchange data in main memory without ...

  • storage (computer storage)

    Data storage is the collective methods and technologies that capture and retain digital information on electromagnetic, optical ...

Close