Administrator Password

When your first receive the device, it is set with the factory default access credentials:

• username: admin
• password: password

After logging into the device for the first time, the administrator is prompted to change this password before accessing the web GUI. You must define a strong passwords to prevent the device from being compromised. Weak passwords, like universal passwords, represent one of the most exploited attack vectors for compromising a device.

Guidance on best practice on passwords can also be found in the following documents:

• NIST Special Publiction 800-63B
• ISO/IEC EN 27002:2022
• ISO/IEC EN 24760
• IEC EN 62443-4-2
• ETSI EN 303 645, CYBER; Cyber Security for Consumer Internet of Things: Baseline Requirements

At minimum SonicWall recommends that the password meets the following requirements

• Contains at least 12 characters
• Combines letters, numbers, special characters
• Does not repeat past passwords
• Screen the new password against blacklists of known compromised or common passwords to prevent weak choices