10.10.10.1 router login

To open the admin panel, type 10.10.10.1 into your browser's address bar. If the page does not load, this is probably not the gateway address on your network — see the checks below.

10.10.10.1 router passwords

Where to find them:

  • The label on the underside or back of the router — most manufacturers print the default admin username, password and Wi-Fi key there.
  • The quick-start card or manual that came in the box.
  • Your ISP's account portal, if the device was supplied by them — many set a unique password per line rather than a shared default.

There are no verified default username and password pairs recorded for 10.10.10.1 itself, and there is a good reason for that: a private address does not identify a device. Any manufacturer can assign 10.10.10.1 to anything, so a credential list tied to the address would be guesswork. The one exception here is Ubiquiti airOS and UniFi hardware, which has historically shipped with ubnt as both username and password.

For anything else, read the defaults off the device rather than off a list. They are commonly printed on a sticker on the underside or rear panel, in the quick-start leaflet, or in the model's manual on the vendor's support site. On ISP-supplied equipment the credentials are often unique per unit and may also appear in the paperwork that came with the service.

Routers that use 10.10.10.1 as their default gateway

Vendor Models Username / Password
Ubiquiti airOS, UniFi ubnt / ubnt

How to log in to your router

  1. Type 10.10.10.1 into your browser's address bar and press Enter. Type it by hand rather than accepting an autocomplete suggestion, which often fills in a different address you visited before.

  2. If the browser reports that it cannot reach 10.10.10.1, this is not the gateway address on your network. On Windows run ipconfig /all and read the Default Gateway line; on macOS open System Settings, Network, Details, TCP/IP; on Linux run ip route and read the address after "default via".

  3. If the login page loads but rejects your credentials, and you have never changed them, use the defaults printed on the device's label. If they have been changed and nobody knows the new password, a factory reset is the only way back in.

If you do not know the password

If the login page loads but no password works, a factory reset is the usual recovery path. Ubiquiti airOS and UniFi devices use a recessed reset button: with the unit powered on, hold it for roughly ten seconds until the LEDs change pattern, then wait for the device to come back up. Other hardware follows a similar hold-the-button procedure, but confirm the timing in that model's manual before relying on it.

A reset is not free. It clears the entire configuration, so WiFi names and passphrases, PPPoE or other WAN credentials, port forwards, firewall rules, static leases and VLANs all revert to factory state. Note that the address itself may change: after a reset the device will use whatever its factory default is, which may no longer be 10.10.10.1. Export a configuration backup first if you can still reach the interface, and make sure you have your ISP connection details to hand.

Reset method by vendor:

  • Ubiquiti — physical reset button on the back or underside. Hold it for about ten seconds with the router powered on, until the status lights cycle.

Troubleshooting 10.10.10.1

Confirm 10.10.10.1 is your gateway

Because 10.0.0.0/8 is subnetted freely, 10.10.10.1 may not be the gateway on your network. On Windows run ipconfig /all and read the Default Gateway line for your active adapter. On Linux run ip route and look at the address after default via. On macOS open System Settings, Network, then Details for the active connection and check the TCP/IP tab. Use whatever address is shown there.

Your device is on a different subnet

If your own address is something like 192.168.1.x or 10.0.0.x, you are not on 10.10.10.0/24 and traffic to 10.10.10.1 will never arrive. Hosts can only reach the address directly when they sit in the 10.10.10.1 to 10.10.10.254 range with a matching mask. Reconnect to the correct network, or assign yourself a static address in that subnet if you are connecting to isolated management hardware.

Browser searches instead of connecting

Typing 10.10.10.1 into a combined search and address bar sometimes sends it to a search engine, especially with a typo. Enter http://10.10.10.1/ with the scheme included. Watch for transposed digits, since 10.10.10.1, 10.10.1.1 and 10.1.10.1 are all plausible-looking addresses on a 10.x network and only one of them is yours. Private addresses have no DNS name, so nothing will autocomplete for you.

HTTP, HTTPS and non-standard ports

Management interfaces differ in what they listen on. Ubiquiti airOS commonly serves HTTPS and will show a certificate warning, since a self-signed certificate for a private address cannot be validated by any authority. Accepting that warning on your own local network is expected. If https://10.10.10.1/ and http://10.10.10.1/ both fail, try an alternate port such as :8080 or :8443, which some equipment uses for administration.

Address answers but the page never loads

Test reachability separately from the web interface: ping 10.10.10.1, or on Windows run arp -a and see whether the address has a MAC entry. If it replies but the browser stalls, the web service may be disabled, bound to a different interface, or restricted to a management VLAN. On firewalls and access points, administration is often deliberately blocked from the client-facing side.

VPN or container network is intercepting

10.0.0.0/8 is heavily used by VPN address pools and by container and orchestration networks, so overlap is common. An active VPN client or a Docker or Kubernetes bridge can install a route that captures 10.10.10.1 and sends it somewhere other than your local router. Disconnect the VPN, or check ip route on Linux and route print on Windows for a more specific route covering that range.

Questions about 10.10.10.1

Is 10.10.10.1 always a router?

No, though it often is. It is the first usable host in 10.10.10.0/24, and administrators commonly place the default gateway at the first usable address, so on a network numbered this way it is very likely to be a router, firewall or access point. Nothing enforces this, however. The address can equally be a server or any other host, so verify with ipconfig /all or ip route rather than assuming.

Can I find out who owns 10.10.10.1?

No. 10.0.0.0/8 is private space set aside by RFC 1918 and is never routed on the public internet. The same address is in simultaneous use on an enormous number of unrelated networks, so it has no registrant, no ISP and no geographic location. A WHOIS lookup returns only the reservation record for the block itself, never anything about the specific device you are trying to reach.

What is the default password for 10.10.10.1?

There is no default tied to the address, because a private address does not identify a device. The one documented case in this subnet is Ubiquiti airOS and UniFi equipment, which has historically used ubnt as both username and password. For anything else, check the sticker on the device, the quick-start leaflet, the model's manual on the vendor's support site, or the paperwork from your ISP if the equipment came from them.

Why does 10.10.10.1 work at the office but not at home?

Private addresses are network-local. The office network is numbered in 10.10.10.0/24 with the gateway at the first address, while a home router usually uses something in 192.168.x.x or a different part of 10.0.0.0/8. Neither network can see the other's private space. From home you would need a VPN into the office, and even then a route for 10.10.10.0/24 has to be present for the address to resolve to the right device.

How many devices fit in 10.10.10.0/24?

The subnet holds 254 usable addresses, 10.10.10.1 through 10.10.10.254. 10.10.10.0 is the network address and 10.10.10.255 is the broadcast address, so neither is assigned to a host. The wider 10.0.0.0/8 block contains 16,777,216 addresses in total, but it is essentially never deployed flat; it is carved into much smaller subnets such as this /24.

I reset the device and can no longer reach 10.10.10.1. What happened?

A factory reset restores the manufacturer's default address, which is often not 10.10.10.1. If the previous address was set by whoever configured the network, it is gone. Check the sticker or manual for the model's factory default management address, or connect a client with DHCP enabled and read the gateway your machine is handed. Some equipment falls back to a fixed address with no DHCP server at all, in which case you will need to assign your own static address in the same range.

Is it safe to use 10.10.10.1 on my own network?

Yes. RFC 1918 space is intended to be reused freely, and 10.10.10.0/24 is a perfectly valid choice. The one practical caution is overlap: 10.0.0.0/8 is popular with VPN providers and container platforms, so picking a memorable pattern like 10.10.10.x raises the odds of colliding with a remote network you later need to reach. A less obvious subnet inside the block avoids that.

10.10.10.1 sits inside 10.0.0.0/8, the largest of the three private ranges reserved by RFC 1918. With a 255.0.0.0 netmask the block spans 16,777,216 addresses, which is why it turns up in corporate and campus networks, ISP-managed CPE, carrier-grade equipment, VPN address pools and container or orchestration networks. In practice nobody routes a flat /8; the space is subnetted far below that, most often into /24s. Because the block is private, the same address exists simultaneously on countless unrelated networks and carries no owner, registrant, ISP or geographic location. Nothing can be learned about who is behind a 10.x address from the address itself.

The surrounding subnet is 10.10.10.0/24, with usable hosts running from 10.10.10.1 to 10.10.10.254 and 10.10.10.255 reserved as the broadcast address. 10.10.10.1 is the first usable host in that range, and the first usable host is the conventional place administrators put the default gateway, so on a network numbered this way the address is very likely to be the router or firewall rather than a client machine. The repeating 10.10.10 pattern is also easy to type and remember, which is part of why it is chosen so often for lab networks, demo topologies, guest segments and management VLANs.

One vendor is documented as shipping this address in default configurations: Ubiquiti, on airOS and UniFi equipment. Beyond that, 10.10.10.1 is far more often the result of a deliberate choice by whoever built the network than of any factory default. Most people who look this address up are trying to open a management interface for a router, access point or firewall that a browser is not reaching, or are trying to work out whether 10.10.10.1 is even the gateway on the network they are currently attached to.

Block10.0.0.0/8
Netmask255.0.0.0
Subnet10.10.10.0/24
Usable10.10.10.1 – 10.10.10.254

10.10.10.1 is often mistyped. These all refer to the same address: l0.l0.l0.l, 1o.1o.1o.1, 10.10..10.1, 10 10 10 1, 10.10.10.1.. The most common slip is typing a lower-case letter L in place of the digit 1, or the letter O in place of a zero.

Whois information for 10.0.0.0/8

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2024, American Registry for Internet Numbers, Ltd.
#


NetRange: 10.0.0.0 - 10.255.255.255
CIDR: 10.0.0.0/8
NetName: PRIVATE-ADDRESS-ABLK-RFC1918-IANA-RESERVED
NetHandle: NET-10-0-0-0-1
Parent:  ()
NetType: IANA Special Use
OriginAS:
Organization: Internet Assigned Numbers Authority (IANA)
RegDate: 1995-06-23
Updated: 2013-08-30
Comment: These addresses are in use by many millions of independently operated networks, which might be as small as a single computer connected to a home gateway, and are automatically configured in hundreds of millions of devices. They are only intended for use within a private context and traffic that needs to cross the Internet will need to use a different, unique address.
Comment:
Comment: These addresses can be used by anyone without any need to coordinate with IANA or an Internet registry. The traffic from these addresses does not come from ICANN or IANA. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/answers
Comment:
Comment: These addresses were assigned by the IETF, the organization that develops Internet protocols, in the Best Current Practice document, RFC 1918 which can be found at:
Comment: http://datatracker.ietf.org/doc/rfc1918
Ref: https://rdap.arin.net/registry/ip/10.0.0.0



OrgName: Internet Assigned Numbers Authority
OrgId: IANA
Address: 12025 Waterfront Drive
Address: Suite 300
City: Los Angeles
StateProv: CA
PostalCode: 90094
Country: US
RegDate:
Updated: 2012-08-31
Ref: https://rdap.arin.net/registry/entity/IANA


OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: ICANN
OrgAbusePhone: +1-310-301-5820
OrgAbuseEmail: abuse@iana.org
OrgAbuseRef: https://rdap.arin.net/registry/entity/IANA-IP-ARIN

OrgTechHandle: IANA-IP-ARIN
OrgTechName: ICANN
OrgTechPhone: +1-310-301-5820
OrgTechEmail: abuse@iana.org
OrgTechRef: https://rdap.arin.net/registry/entity/IANA-IP-ARIN