10.2.0.1 router login
To open the admin panel, type 10.2.0.1 into your browser's address bar. If the page does not load, this is probably not the gateway address on your network — see the checks below.
10.2.0.1 router passwords
Where to find them:
- The label on the underside or back of the router — most manufacturers print the default admin username, password and Wi-Fi key there.
- The quick-start card or manual that came in the box.
- Your ISP's account portal, if the device was supplied by them — many set a unique password per line rather than a shared default.
There are no documented default username and password pairs for 10.2.0.1, and that is expected rather than a gap. Because 10/8 addresses are assigned by network designers instead of shipped as factory defaults, the credentials belong to whichever device happens to hold this address on your network, not to the address itself. Look for a sticker or label on the underside or rear of the unit, which on many devices prints the default web password or Wi-Fi key. Failing that, check the model's manual, or the documentation your ISP or IT department supplied. On managed corporate and campus networks a gateway at 10.2.0.1 usually has credentials set by an administrator, and no published default will work.
How to log in to your router
Type 10.2.0.1 into your browser's address bar and press Enter. Type it by hand rather than accepting an autocomplete suggestion, which often fills in a different address you visited before.
If the browser reports that it cannot reach 10.2.0.1, this is not the gateway address on your network. On Windows run ipconfig /all and read the Default Gateway line; on macOS open System Settings, Network, Details, TCP/IP; on Linux run ip route and read the address after "default via".
If the login page loads but rejects your credentials, and you have never changed them, use the defaults printed on the device's label. If they have been changed and nobody knows the new password, a factory reset is the only way back in.
If you do not know the password
Since no vendor is known for this address, there is no single documented reset procedure. The general pattern on most consumer and small business hardware is a recessed reset button held for roughly ten to thirty seconds while the unit is powered on, until the status lights cycle. Confirm the exact hold time in the manual for the specific model before trying it.
A factory reset is not a light step. It commonly clears the Wi-Fi name and password, any port forwarding or firewall rules, static leases, VLAN configuration and ISP connection settings such as PPPoE credentials. On a managed or corporate network where 10.2.0.1 is a gateway serving other users, a reset can take the whole segment offline. Ask the administrator before resetting anything you did not configure yourself.
Troubleshooting 10.2.0.1
Confirm 10.2.0.1 is your gateway
Before troubleshooting the device, check that this address is on your network at all. On Windows run ipconfig /all and read the Default Gateway line. On Linux run ip route and look at the default via entry. On macOS open System Settings, Network, your active interface, then Details and TCP/IP. If a different address appears, that one is your gateway and 10.2.0.1 belongs to another network.
Browser cannot reach the address
Try http://10.2.0.1 explicitly, since typing the bare address can send it to a search engine. If the page never loads, ping 10.2.0.1 to see whether anything answers. No reply usually means you are on a different subnet, connected over a VPN that is not routing 10.2.0.0/24, or on Wi-Fi with client isolation enabled. Connect by cable to the segment and retry.
Overlapping 10/8 ranges over VPN
Because 10.0.0.0/8 is reusable private space, both your local network and a remote VPN network may use 10.2.0.0/24. When they overlap, traffic for 10.2.0.1 can be sent to the wrong side of the tunnel. Disconnect the VPN and retry to see which one answers. Persistent overlap needs a renumbered subnet or NAT on the tunnel, arranged with whoever runs it.
HTTP, HTTPS and non-standard ports
Management interfaces vary. Some listen on plain HTTP, some redirect to HTTPS with a self-signed certificate that triggers a browser warning, and some listen on an alternate port such as 8080 or 8443. Try http://10.2.0.1 first, then https://10.2.0.1, then append a port as in http://10.2.0.1:8080. A certificate warning on a local private address is normal and can be accepted to proceed.
Page loads but the login is rejected
If the interface appears but credentials fail, the password has most likely been changed from whatever the device shipped with. On corporate segments an administrator set it. Check the label on the hardware, the model manual, or ISP documentation before assuming a fault. Repeated failures on many devices trigger a temporary lockout, so wait several minutes between attempts rather than retrying rapidly.
Mistyping the address
10.2.0.1 is easily confused with 10.2.0.0, which is the network identifier for this /24 and not a usable host, and with 10.2.0.255, the broadcast address. It is also often mistyped as 10.20.0.1 or 10.2.1.1, which are entirely different addresses. Use dots only, never commas or slashes, and do not add a subnet suffix such as /24 in the browser bar.
Questions about 10.2.0.1
Where is 10.2.0.1 located, and who owns it?
Nowhere and no one. 10.2.0.1 sits in 10.0.0.0/8, private space set aside by RFC 1918 that is never routed on the public internet. Any organisation or household can use it internally, so the same address exists on countless unrelated networks at once. No geographic location, ISP, registrant or owner can be attached to it, and any lookup service claiming otherwise is reporting something else.
Which router brand uses 10.2.0.1 by default?
No specific vendor is known to ship 10.2.0.1 as a factory default gateway. Addresses in 10.0.0.0/8 are usually chosen by whoever designed the network rather than preset in consumer firmware, which is more typical of 192.168.x.x ranges. The device answering on this address on your network could be a router, firewall, layer 3 switch or VPN concentrator, and you would identify it by asking your administrator or tracing the cable.
Why does 10.2.0.1 end in .1?
It is the first usable address in the 10.2.0.0/24 subnet, whose host range runs from 10.2.0.1 to 10.2.0.254. By long-standing convention network designers put the gateway interface at the first or last usable address of a segment, so .1 very commonly belongs to the router. It is a convention rather than a rule, and some networks place the gateway at .254 or elsewhere in the range.
How many addresses are in this subnet and block?
The 10.2.0.0/24 subnet holds 256 addresses, of which 254 are usable hosts: 10.2.0.0 is the network identifier and 10.2.0.255 is the broadcast address. The surrounding 10.0.0.0/8 block, with a mask of 255.0.0.0, contains 16,777,216 addresses in total. In practice almost nobody deploys 10/8 as one flat network; it is subnetted far below /8 into segments like this /24.
What is the default password for 10.2.0.1?
There is no default password for an address, only for a device. No credential pairs are documented for 10.2.0.1, and guessing at them would be misleading. Check the sticker on the hardware itself, which on many units prints the default web login, then the manual for the exact model, then any documentation from your ISP. On a managed network the password was set by an administrator and no published default applies.
My gateway is 192.168.1.1, so why did I end up here?
You are probably on a different network from the one using 10.2.0.1. Because 10/8 is reusable private space, seeing this address written down somewhere does not mean it exists on your current connection. Run ipconfig /all on Windows, ip route on Linux, or check the TCP/IP details of your active interface on macOS to see your real gateway, and use that address instead.
Can I reach 10.2.0.1 from outside the network?
Not directly. RFC 1918 addresses are not routed across the public internet, so the address is only reachable from inside the network that uses it. Remote access requires a VPN into that network, or a deliberate port forward or reverse proxy set up by an administrator. Be aware that if the remote network also uses 10.2.0.0/24, the two ranges will overlap and routing will need adjusting.
10.2.0.1 is a private IPv4 address inside 10.0.0.0/8, the largest of the three RFC 1918 ranges. With a natural mask of 255.0.0.0 the block spans 16,777,216 addresses, and nothing in it is routable across the public internet. That size is the reason it turns up where it does: corporate and campus networks, ISP-managed customer equipment, carrier-grade gear, VPN address pools and container or orchestration networks all draw from 10/8 and then subnet it far below /8 into manageable segments. Because the space is unallocated and reusable by anyone, the same address can exist simultaneously on thousands of unrelated networks, and no location, ISP, owner or registrant can be attached to it.
Within that block, 10.2.0.1 sits in the 10.2.0.0/24 segment, whose usable host range is 10.2.0.1 through 10.2.0.254 with 10.2.0.255 reserved as the broadcast address. It occupies the first usable position in that /24, which is the conventional slot for a router, firewall or layer 3 switch interface acting as the default gateway. Twenty other addresses in this same /24 are documented separately, which is typical of a segment that carries a gateway plus a handful of infrastructure hosts rather than a single home router.
No specific router vendor or model is known to ship 10.2.0.1 as a factory default gateway. Addresses in 10/8 are far more often assigned by whoever designed the network than baked into consumer firmware. Most people arriving here have seen 10.2.0.1 listed as their default gateway, or in a VPN or corporate network configuration, and want to open its management interface, sign in, or work out which device is actually answering on that address.
Whois information for 10.0.0.0/8
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2024, American Registry for Internet Numbers, Ltd.
#
NetRange: 10.0.0.0 - 10.255.255.255
CIDR: 10.0.0.0/8
NetName: PRIVATE-ADDRESS-ABLK-RFC1918-IANA-RESERVED
NetHandle: NET-10-0-0-0-1
Parent: ()
NetType: IANA Special Use
OriginAS:
Organization: Internet Assigned Numbers Authority (IANA)
RegDate: 1995-06-23
Updated: 2013-08-30
Comment: These addresses are in use by many millions of independently operated networks, which might be as small as a single computer connected to a home gateway, and are automatically configured in hundreds of millions of devices. They are only intended for use within a private context and traffic that needs to cross the Internet will need to use a different, unique address.
Comment:
Comment: These addresses can be used by anyone without any need to coordinate with IANA or an Internet registry. The traffic from these addresses does not come from ICANN or IANA. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/answers
Comment:
Comment: These addresses were assigned by the IETF, the organization that develops Internet protocols, in the Best Current Practice document, RFC 1918 which can be found at:
Comment: http://datatracker.ietf.org/doc/rfc1918
Ref: https://rdap.arin.net/registry/ip/10.0.0.0
OrgName: Internet Assigned Numbers Authority
OrgId: IANA
Address: 12025 Waterfront Drive
Address: Suite 300
City: Los Angeles
StateProv: CA
PostalCode: 90094
Country: US
RegDate:
Updated: 2012-08-31
Ref: https://rdap.arin.net/registry/entity/IANA
OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: ICANN
OrgAbusePhone: +1-310-301-5820
OrgAbuseEmail: abuse@iana.org
OrgAbuseRef: https://rdap.arin.net/registry/entity/IANA-IP-ARIN
OrgTechHandle: IANA-IP-ARIN
OrgTechName: ICANN
OrgTechPhone: +1-310-301-5820
OrgTechEmail: abuse@iana.org
OrgTechRef: https://rdap.arin.net/registry/entity/IANA-IP-ARIN
Other documented addresses in 10.2.0.0/24
The 10.2.0.0/24 subnet runs from 10.2.0.1 to 10.2.0.254, with 10.2.0.255 reserved as the broadcast address. These are the addresses in it we hold router login details for.
All addresses we cover here
21 addresses in this subnet have a page; the most looked-up are listed here.