NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
DirkO
Mar 01, 2019Apprentice
RBR50 password recovery failure
HI All,
So when logging in to my base station I was prompted to change my password because of security.
So I used a password manager and gave it a strong 20 character including 3 numbers and ...
DirkO
Mar 01, 2019Apprentice
I knew you where going to ask for the browser info :)
Sorry for the delay but I did manage to record to error.
First of I'm on a mac (High Sierra 10.13.6) I tried both Chrome and Safari.
I did a reset of my browser cashes and even did a reboot but still the same behavior.
I even went thru the trouble to spinup a windows VM and try edge + Chrome, they both had the same behavior.
So I thought i will be smart here and I used my iphone to record the screen and then i look at it frame by frame until I could read the password ...... clever boy..... however when attempting to use the recoverd from the video password I'm still not allowed to log in.
So maybe the password is too long ? or it has characters that it cant handle ?
password = dH=48{8D72kC)ellaJRG
I have no problem with reseting the router and giving it a new password, it runs in bridge mode so no big deal but I would like to know what the problem is and if this is a password restriction why didn't I get a popup "password not allowed" and what part is not allowed ?
I attached a video file in real speed indicating the behaviour.
(o no I didn't because forum doesn't allow video's, you can download here: https://www.dropbox.com/s/wqmtpbx1y8e6oex/IMG_0441.m4v?dl=0)
Cheers,
DirkO
Mar 01, 2019Apprentice
I also tried using the iphone but also same problem
- FURRYe38Mar 02, 2019Guru - Experienced User
Lets try setting a shorter more simple PW and see if this changes behaviors.
The Admin PW doesn't have to be long or complex.
- DirkOMar 02, 2019Apprentice
Ha Ha, "The Admin PW doesn't have to be long or complex". Until they hack you and copy all your data, I'm sure I can write a whole book with horror stories of people with poor passwords getting hacked. Russia and China salute you.
I can recall a story that happened less then a few months ago where a email provider had to close shop because they had a weak password exploit somewhere in there system, hackers got in, wiped all the hard drives and backups because the hackers had admin access. I'm pretty sure that guy now wishes he had a better password.
I'm sorry, don't want be a ass but I just don't think using a simpler less secure password is the answer to this problem and I would even dare to argue that you should never ever advise anyone to use a weak password. Everybody should use a password manager and obscure unique difficult passwords for all there logins.
I'm back up and running with the wifi, reset button in the back, restore from backup and bang back to normal.
(With a weak password however)
This doesn't change the fact that the software got stuck in a loop and locked the admin out from access. This needs to be fixed. There should also have been a a software trap to catch these Non complaint passwords. A guide of some sorts for what is allowed and what is not would be appreciated.
Thank you for your advise.