172.16.0.1 router login

To open the admin panel, type 172.16.0.1 into your browser's address bar. If the page does not load, this is probably not the gateway address on your network — see the checks below.

172.16.0.1 router passwords

Where to find them:

  • The label on the underside or back of the router — most manufacturers print the default admin username, password and Wi-Fi key there.
  • The quick-start card or manual that came in the box.
  • Your ISP's account portal, if the device was supplied by them — many set a unique password per line rather than a shared default.

There are no documented default username and password pairs for 172.16.0.1 in this reference, so none are listed. An IP address does not carry credentials; the login belongs to whatever device happens to answer on it, and on a 172.16 network that could be a router, a firewall, a lab appliance or a virtual gateway. Guessing pairs wastes attempts and can trigger lockouts.

Find the device's own defaults instead. Check the label or sticker on the underside or rear of the unit, the printed quick-start guide, or the vendor's manual for that exact model number. If the hardware was supplied by an ISP or an IT department, the defaults are often set per unit and documented in their paperwork rather than by the manufacturer.

Routers that use 172.16.0.1 as their default gateway

Vendor Models Username / Password
MikroTik RouterBOARD, hEX admin / blank

How to log in to your router

  1. Type 172.16.0.1 into your browser's address bar and press Enter. Type it by hand rather than accepting an autocomplete suggestion, which often fills in a different address you visited before.

  2. If the browser reports that it cannot reach 172.16.0.1, this is not the gateway address on your network. On Windows run ipconfig /all and read the Default Gateway line; on macOS open System Settings, Network, Details, TCP/IP; on Linux run ip route and read the address after "default via".

  3. If the login page loads but rejects your credentials, and you have never changed them, use the defaults printed on the device's label. If they have been changed and nobody knows the new password, a factory reset is the only way back in.

If you do not know the password

If the credentials are genuinely lost, a factory reset restores the device to its shipped defaults. MikroTik RouterBOARD and hEX units, the documented vendors for this address, use a recessed pinhole reset: with the unit powered, hold the button with a straightened paperclip until the activity LED begins flashing, then release. Timing and LED behaviour vary by model, so confirm against that model's manual before starting.

A reset is not free. It clears wireless names and passphrases, firewall and NAT rules, DHCP reservations, VPN configuration, port forwards and any static routes. On a business or lab network built on 172.16 space that can mean rebuilding a substantial configuration by hand. Export or back up the configuration first if you can still reach the device at all.

Reset method by vendor:

  • MikroTik — recessed reset hole on the back panel. Hold it down with a straightened paperclip for about ten seconds with the router powered on, until the status lights cycle.

Troubleshooting 172.16.0.1

Browser will not load the page

Type the address as a bare host, 172.16.0.1, with no www and no search terms around it. If nothing loads, confirm your machine actually holds an address in the same 172.16.0.0/24 subnet, meaning something between 172.16.0.2 and 172.16.0.254. A device on a different subnet cannot reach this gateway without a route, and browsers will silently fall back to a search engine.

Confirm 172.16.0.1 is your gateway

On Windows, run ipconfig /all in Command Prompt and read the Default Gateway line. On Linux, run ip route and look at the address after default via. On macOS, open System Settings, then Network, select the active interface, and check Details, then TCP/IP. If the gateway shown is anything other than 172.16.0.1, use the address listed there instead.

Page loads but the login is rejected

No default pairs are documented for this address, so anything you are typing from a generic list is a guess. Read the sticker on the device or its manual for the shipped defaults. Note that many MikroTik units ship with a blank password field rather than a word, so leaving the password empty is worth trying before assuming the credentials were changed.

HTTP, HTTPS and port confusion

Try http://172.16.0.1 first. Business and lab gear on 172.16 networks is more likely than consumer kit to have plain HTTP disabled or the management interface moved to a non-standard port, in which case https://172.16.0.1 or an explicit port such as 172.16.0.1:8080 may be required. A certificate warning on an internal HTTPS page is expected and can be accepted.

Mistyping the address

172.16.0.1 is easy to garble. Common slips are 127.16.0.1, which is loopback space and will point back at your own machine, and 172.16.01 or 172.160.1, which are not valid dotted-quad addresses. Also check you have not landed on 172.16.1.1, a different subnet entirely. Type the four groups separately and confirm each one.

Address conflict on the subnet

Because 172.16.0.0/12 is reusable private space, the same addressing often exists on both ends of a VPN or between a host and a Docker bridge network. If you are connected to a VPN, or running containers, your machine may already route 172.16.0.0/24 somewhere else and never send the request to the local gateway. Disconnect the VPN or stop the container network and retry.

Questions about 172.16.0.1

Is 172.16.0.1 a public internet address?

No. It falls inside 172.16.0.0/12, which RFC 1918 reserves for private use, so it is not routed on the public internet. The confusion is understandable: 172 addresses outside the 172.16 through 172.31 window are ordinary public space. Only that specific range is private, which is why 172.15.0.1 and 172.32.0.1 behave completely differently from this address.

Can you tell me who owns 172.16.0.1 or where it is?

No, and neither can anyone else. Private addresses are not registered to any organisation, ISP or country. The same address is in simultaneous use on an unknown number of separate networks worldwide, from office LANs to laptops running Docker. Any lookup service claiming a city, provider or registrant for a 172.16 address is reporting something it cannot know.

What is the default password for 172.16.0.1?

There is no such thing, because the password belongs to the device rather than to the address, and no default pairs are documented for this address here. Check the sticker on the hardware, the printed setup guide, or the vendor manual for your exact model. If an ISP or IT team installed the unit, the credentials are likely recorded in their documentation instead.

Why does this address appear when I use Docker?

Docker allocates private subnets for its bridge networks, and 172.16.0.0/12 is one of the ranges it commonly draws from, alongside its familiar 172.17.0.1 default bridge gateway. If 172.16.0.1 appears on your machine as a container network gateway, it belongs to that virtual network rather than to any physical router, and there is no web login behind it.

How many addresses are in the 172.16 private range?

The full block, 172.16.0.0/12 with netmask 255.240.0.0, holds 1,048,576 addresses spanning 172.16.0.0 to 172.31.255.255. Within it, this particular /24 subnet, 172.16.0.0/24, offers usable hosts from 172.16.0.1 through 172.16.0.254, with 172.16.0.255 reserved as the broadcast address. Nineteen other addresses in that same /24 are documented separately.

Why is 172.16.0.1 used instead of 192.168.0.1?

Consumer broadband routers overwhelmingly ship on 192.168 space, so it dominates home networks. The 172.16 range tends to be chosen deliberately by network administrators for mid-size business LANs, lab and training environments, and VPN subnets, partly because it is far less likely to collide with the 192.168 addressing on a remote worker's home network at the other end of a tunnel.

Which routers use 172.16.0.1 as their default gateway?

Among documented vendors, MikroTik RouterBOARD and hEX devices are associated with this address. Beyond that, 172.16.0.1 is more often a configured choice than a factory default, since position 1 in a subnet is the conventional gateway slot and administrators assign it manually. That means the device answering on it in your network could be almost any router, firewall or virtual gateway.

172.16.0.1 sits inside 172.16.0.0/12, the mid-size block reserved for private use by RFC 1918. That block carries the netmask 255.240.0.0 and covers 1,048,576 addresses running from 172.16.0.0 through 172.31.255.255. It is the least familiar of the three private ranges, and the one most often misread: 172.x.x.x addresses outside the 172.16 to 172.31 window are ordinary public space, so people sometimes assume any 172 address is routable on the internet. It is not. Traffic to 172.16.0.1 never leaves the local network, and the same address is in use on countless unrelated networks at the same time, which is why no location, ISP or owner can be attached to it.

The specific subnet here is 172.16.0.0/24, with usable hosts from 172.16.0.1 to 172.16.0.254 and a broadcast address of 172.16.0.255. Position 1 is the first usable address in that subnet and the conventional slot for the router or default gateway, which is the main reason this address turns up in browser address bars at all. Nineteen other addresses in the same /24 are documented separately.

On deployment context, the 172.16 range shows up in mid-size business networks, lab and training environments, VPN subnets and Docker default bridge networking rather than in consumer broadband kit. Among documented vendors, MikroTik RouterBOARD and hEX devices are associated with this address. Most visitors arriving here are trying to open a router or firewall administration page, either to change wireless settings, forward a port, or check why the device is not responding. Roughly 459 people a year look up this address.

Block172.16.0.0/12
Netmask255.240.0.0
Subnet172.16.0.0/24
Usable172.16.0.1 – 172.16.0.254

172.16.0.1 is often mistyped. These all refer to the same address: l72.l6.0.l, 172.16.o.1, 172.16..0.1, 172 16 0 1, 172.16.0.1.. The most common slip is typing a lower-case letter L in place of the digit 1, or the letter O in place of a zero.

Whois information for 172.16.0.0/12

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2024, American Registry for Internet Numbers, Ltd.
#


NetRange: 172.16.0.0 - 172.31.255.255
CIDR: 172.16.0.0/12
NetName: PRIVATE-ADDRESS-BBLK-RFC1918-IANA-RESERVED
NetHandle: NET-172-16-0-0-1
Parent:  ()
NetType: IANA Special Use
OriginAS:
Organization: Internet Assigned Numbers Authority (IANA)
RegDate: 1994-03-15
Updated: 2013-08-30
Comment: These addresses are in use by many millions of independently operated networks, which might be as small as a single computer connected to a home gateway, and are automatically configured in hundreds of millions of devices. They are only intended for use within a private context and traffic that needs to cross the Internet will need to use a different, unique address.
Comment:
Comment: These addresses can be used by anyone without any need to coordinate with IANA or an Internet registry. The traffic from these addresses does not come from ICANN or IANA. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/answers
Comment:
Comment: These addresses were assigned by the IETF, the organization that develops Internet protocols, in the Best Current Practice document, RFC 1918 which can be found at:
Comment: http://datatracker.ietf.org/doc/rfc1918
Ref: https://rdap.arin.net/registry/ip/172.16.0.0



OrgName: Internet Assigned Numbers Authority
OrgId: IANA
Address: 12025 Waterfront Drive
Address: Suite 300
City: Los Angeles
StateProv: CA
PostalCode: 90094
Country: US
RegDate:
Updated: 2012-08-31
Ref: https://rdap.arin.net/registry/entity/IANA


OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: ICANN
OrgAbusePhone: +1-310-301-5820
OrgAbuseEmail: abuse@iana.org
OrgAbuseRef: https://rdap.arin.net/registry/entity/IANA-IP-ARIN

OrgTechHandle: IANA-IP-ARIN
OrgTechName: ICANN
OrgTechPhone: +1-310-301-5820
OrgTechEmail: abuse@iana.org
OrgTechRef: https://rdap.arin.net/registry/entity/IANA-IP-ARIN

Other documented addresses in 172.16.0.0/24

The 172.16.0.0/24 subnet runs from 172.16.0.1 to 172.16.0.254, with 172.16.0.255 reserved as the broadcast address. These are the addresses in it we hold router login details for.

All addresses we cover here

20 addresses in this subnet have a page; the most looked-up are listed here.