Reading 10.1.1.1 as a local gateway
10.1.1.1 shows up in searches because folks drop a dot when they type. The router does not own a website under that name. It only answers on the local wire. A partial string, a doubled dot, or a letter that looks like a digit will miss it.
Compare each character with a gateway that is known to work. Look twice at a skinny L where a 1 belongs. Watch for the letter O where a zero belongs.
- Retype slowly in the address bar
- If the bar turns into search, press Escape and try again
- On a phone, turn off mobile data so the request stays on Wi-Fi.
An edited digit will miss the device. The fix is almost always the typing, not a new router.
Use the checks on this page for 10.1.1.1, then type the dotted number in the address bar with one dot between each group.
People also type this address in these ways.
10.1 1.1 · 10.1 1 1 · 10.1 11 · 10.1 l l · 10.1.l.l · 10.1.l.1 · 10.1.1.l · 10.1.1..1 · 10.11 1 · 10.1.11 · 101.1.1 · 10.1 1.01 · 10.1 01.1 · 10.01 1.1 · http 10.1 1.1
Getting the 10.1.1.1 admin screen to load
Typing 10.1.1.1 beats a dusty bookmark until you know the bookmark is current. Favorites do not notice a new address. Type it once, confirm the form, then save. Name the bookmark after the router, not 'setup'.
- Hand-type it prior to bookmarking
- Check the form is the router's
- On the next visit, the bookmark is fair game
- If it fails after a LAN edit, delete it
Then bookmark that exact URL. Make a new one from the gateway the computer shows that day.
A wrong bookmark feels like a broken router. The link aged out, the box may be fine. Type it by hand once so you know the saved link is honest.
Type 10.1.1.1 by hand until the form appears, then bookmark it, and delete that bookmark after any LAN change so it cannot point at the old address.
Useful switches on the 10.1.1.1 admin page
DHCP at 10.1.1.1 hands out the addresses that are not the gateway. A fixed lease stops an important device from wandering. You do not need this for a phone. You do need it when a camera or a NAS is tired of moving. The client list shows the hardware address you need.
- Look for DHCP reservation or static lease
- Add the MAC and the address you want, inside the LAN range
- Save
- Renew the device's lease or reboot it
Avoid the gateway's own address. Check that it received the address you reserved.
A reservation does not move the gateway. The router keeps its address unless you change it.
Use a DHCP reservation at 10.1.1.1 when a camera or NAS must keep one address, and never reserve the gateway address the router already uses for itself.
Factory reset when 10.1.1.1 will not sign you in
The reset control for 10.1.1.1 is usually a recessed pin, not the WPS button. WPS will not restore the admin password. Look for a tiny hole marked Reset. A paperclip reaches it better than a finger.
- Find the hole before you power anything off
- Keep the router powered on for the hold
- Tell people the Wi-Fi will drop.
Press and hold with a pin. Wait through the light change described below. Release only after the lights show a reboot.
Holding WPS for a minute does nothing useful for a forgotten password. Leave WPS out of this recovery. Press the pinhole, not the pair button.
Hold the recessed reset pin for 10.1.1.1, not the WPS button, and wait until the lights change before you try the factory password.
One look tells you why 10.1.1.1 failed
Do not cycle the power until the screen has had a vote.
- Another device's menu. Cameras and printers answer on LAN addresses. Check the gateway on the thing in your hand.
- Wrong secret. Admin password and Wi-Fi password are not twins. Empty the form. Mind Caps Lock and the O.
- Search took over. Move to the address bar. Type http://10.1.1.1
- Browser certificate warning. Okay when the host matches 10.1.1.1. Not okay to install a helper from an ad.
- Sloppy typing. Four numbers, three dots. That is the whole of 10.1.1.1.
- It just times out. You left the network. Cell data will not do. Guest Wi-Fi usually will not either.
If the browser cannot open 10.1.1.1
An iPhone on the home Wi-Fi can reveal the router when 10.1.1.1 fails in Safari. You stay in Settings, not in a browser trick. Cellular data must stay out of this test or the phone leaves the LAN. Stay on Wi-Fi only while you read the row.
Open Settings, then Wi-Fi. Find the Router line. Type that number into Safari's address bar.
If Router is blank, toggle Wi-Fi off and on. Forget the network only if you know the wireless password. Do not type the number into the search website.
The IP Address row is the phone, and the Router row is the box. Use the router row for the admin screen.
On an iPhone, use the Router row rather than the phone's own IP Address row, or you will keep chasing the wrong page instead of 10.1.1.1.
Harden the 10.1.1.1 admin screen
Limit who can open 10.1.1.1 even inside the house when the firmware allows it. Others can disable web admin on Wi-Fi and keep Ethernet. Use the strictest option you will not hate next month. Ethernet-only admin is awkward and effective.
- Look for access control or admin host settings
- Save and test from the allowed place
- If you lock yourself out, the reset pin still exists
- Write down what you restricted
Test from a phone that should fail, if you set a limit. A rule you cannot remember is a rule you will trip over.
Most homes are fine with a strong password, remote admin off, and logout. Simple restrictions beat a clever one you forget.
A strong 10.1.1.1 password plus remote admin off is enough for most homes, and tighter admin-host rules are worth adding only when that menu is obvious.
Routers that use 10.1.1.1 by default
These models leave the factory at 10.1.1.1. The user and password are the stock login. On many current models the password is printed on the case, or the setup wizard asks you to create one.
| Make | Model | User | Password | Connection |
|---|---|---|---|---|
| iiNet | Technicolor TG-789 Broadband Gateway | admin | on the sticker | Web |
Questions people ask about 10.1.1.1
Should remote management stay on for 10.1.1.1?
Leave it off. The admin page is for people at home. Remote management, WAN web access, and a port forward of 80, 443, or 8080 to the router all expose the login. Turn those off and test from mobile data; the page should time out.
How do I check that 10.1.1.1 is closed from the internet?
Disconnect Wi-Fi on a phone, use cellular data, and try the public address and 10.1.1.1. Neither should open your admin form. Then rejoin the home Wi-Fi and confirm the local gateway still loads. If cellular can open it, remote access is still enabled.
Is UPnP a problem on the 10.1.1.1 page?
UPnP lets devices open ports without asking. Turn it off if you do not need it, and delete forwarding rules you do not recognize. It does not change the admin address, but a sloppy rule can publish a device you meant to keep inside.
What do I do about WPS when I lock down 10.1.1.1?
Disable WPS in the wireless menu after your own devices are joined. The button is not a reset and not a substitute for the Wi-Fi password. Older PIN modes are the part worth switching off. Join later devices by typing the key.
Does a strong 10.1.1.1 password matter if remote admin is off?
Yes. Everyone on the Wi-Fi can still try the local page. The sticker password is visible to anyone who handles the router. Use a unique admin phrase, keep it different from the Wi-Fi key, and log out on shared computers.