NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
RBR850 Web User Interface no longer requires a password to access
For a long time, when I tried to connect to my Orbi RBR850 web user interface from my browser, I was getting an "unable to connect" error, which I believe was a very common problem for a while. I...
I think I have vague idea of what is going on.
So first off, clearing cache and cookies did not do anything.
I tried with the Edge browser (My main browser is Chrome), and that did work correctly: was prompted for login. And after clicking logout and trying again, was prompted for login again.
I realized that I have Google Sync turned on in my Chrome environment. So I opened a new browser window under a guest profile and this time I was correctly prompted for login, and clicking logout also worked correctly, forcing me to need to login again.
So I'm guessing that there is something with Google Sync that is somehow over-aggressively preserving my credentials (it isn't a "saved passwords" thing, I do not save passwords in the browser or in GoogleSync; I have a separate password manager for that, and that one isn't even capable of detecting the login modal that the Orbi UI uses instead of a login webpage anyway).
It's extremely odd and slightly troubling, but at least I'm confident that it's not a gaping hole; it's not like anyone from the outside, or even on my network, will be let through into the router UI; it seems that it's only a browser that is logged into my personal GoogleSync account is going to be able to get in; and that's at least as secure as (if not more than) the login for the UI.
EDIT TO ADD: My firmware is V4.6.8.2_2.1.9, in case that matters.
Be sure to clear out your broswer caches and if you happend to let your browser remember the RBR log in information, this would be the only reason why your browser is not showing a log in popup window.
Try a different browser as well. I use MS Edge all the time and always get a log in popup.
I think that is the entire point of the post. Even when the web browser has cached the login credentials ('admin' and password), the Orbi web interface always pops up the login box. If it does not, there is something different.
There are other web sites which remember a user, probably by storing a cookie, and know who the user is without asking. The Orbi web interface has never done that.
Another experiment would be to bring up the Orbi Attached Devices page and leave it open. After a certain number of minutes, that login prompt is supposed to pop up again. (This annoys me a lot because I may be typing something in a different browser window and when that prompt pops up, what I am typing going into the "admin" part of the pop up and I have to erase it and put "admin" back in. - while swearing.)
If some time goes by and that popup window never appears, that is further evidence of something different going on.
I do not have an 850 with this firmware, and thus cannot test what happens myself.
