How Do I Reset My Cisco Router Password?

Losing or inheriting an unknown administrative password on a Cisco router can bring network maintenance to a complete standstill. Whether managing an enterprise Integrated Services Router (ISR), a Catalyst edge platform, or a Cisco Small Business RV-series device, regaining administrative access requires physical console or hardware access.

Depending on your operational goals, you can take one of two approaches: recover the password while preserving the entire existing startup configuration, or perform a destructive factory reset to wipe all configurations and start fresh. Selecting the right path depends on whether you have a viable configuration backup and the specific hardware model in your rack.

Table of Contents

Password Recovery vs. Factory Reset: Understanding the Differences

Before attaching console cables or pressing hardware buttons, determine whether your goal is data preservation or device sanitization. Bypassing a password via ROM Monitor (ROMMON) mode leaves interfaces, routing protocols, and access control lists (ACLs) intact, whereas a factory reset deletes all non-volatile random-access memory (NVRAM) contents.

Evaluation Criterion	Non-Destructive Password Recovery	Complete Factory Reset
Configuration Preservation	Retains all existing interface, routing, VPN, and security settings.	Erases the entire startup configuration and all stored certificates.
Physical Access Requirement	Serial or USB console cable connected directly to the management port.	Console cable for enterprise IOS/IOS XE; physical pinhole button for Small Business models.
Core Mechanism	Changes the virtual configuration register to bypass NVRAM during boot (`0x2142`).	Executes `write erase` from the CLI or triggers a long-press on a hardware reset button.
Post-Procedure State	Router retains original configuration with updated administrative credentials.	Router reboots to initial out-of-the-box setup dialog with factory default credentials.
Operational Downtime	Requires a planned reboot into ROMMON mode (typically 5–10 minutes).	Requires a reboot and complete reconfiguration or restoration from an external backup.
Primary Use Case	Lost administrative credentials on an active production router without an off-box backup.	Decommissioning, hardware redeployment, or recovering from irrecoverable configuration errors.

If you need to maintain routing tables, firewall rules, and interface assignments, proceed with non-destructive password recovery. If the device is being decommissioned or repurposed, a factory reset is the more efficient choice.

Establishing Console Access and Sending the Break Sequence

Both non-destructive password recovery and console-based factory resets require interrupting the Cisco Internetwork Operating System (Cisco IOS or IOS XE) boot process to drop into ROMMON mode. This requires a direct console connection and an emulator capable of transmitting a serial Break signal.

Step 1: Connect the Physical Console Cable

Connect an RJ-45-to-DB9 rollover cable (with a USB serial adapter) or a direct mini-USB/USB-C console cable from your workstation to the port labeled CONSOLE on the Cisco router.
Identify the active COM port (Windows Device Manager) or TTY device path (/dev/tty.usbserial-* on macOS or /dev/ttyUSB0 on Linux).

Step 2: Configure Your Terminal Emulator

Open PuTTY, SecureCRT, Tera Term, or a terminal session with the standard serial parameters:
* Baud Rate (Speed): 9600
* Data Bits: 8
* Parity: None
* Stop Bits: 1
* Flow Control: None

Step 3: Power Cycle and Transmit the Break Signal

To enter ROM Monitor mode, you must issue a Break signal within the first 60 seconds of the router’s boot cycle, while system bootstrap diagnostics are executing:

In PuTTY: Press Ctrl + Break. If your keyboard lacks a physical Break key, right-click the PuTTY title bar, navigate to Special Command, and select Break.
On Modern Laptops without a Break Key: Use vendor-specific combinations such as Fn + B, Ctrl + Fn + B, or Ctrl + Fn + S (common on Lenovo, Dell, and HP laptops).
On macOS / Linux (via screen or minicom): In a screen session, press Ctrl + A, release, and press Ctrl + B. In minicom, press Ctrl + A, then press F.

A successful Break sequence halts normal decompression and displays the ROMMON prompt:

rommon 1 >

If the router continues booting into IOS, power cycle the device and send the Break signal immediately when the initial memory diagnostics appear on the screen.

How to Reset a Cisco Router Password Without Losing the Configuration

Once you have reached the rommon 1 > prompt, you can bypass the existing credentials by altering the configuration register. This value dictates how the router boots; setting it to 0x2142 instructs the processor to ignore the configuration stored in NVRAM and boot with an empty running configuration.

+-------------------------------------------------------------+
| 1. Enter ROMMON Mode (Send Break sequence during boot)      |
+-------------------------------------------------------------+
                              |
                              v
+-------------------------------------------------------------+
| 2. Bypass NVRAM: rommon 1 > confreg 0x2142                  |
+-------------------------------------------------------------+
                              |
                              v
+-------------------------------------------------------------+
| 3. Reboot: rommon 2 > reset                                 |
+-------------------------------------------------------------+
                              |
                              v
+-------------------------------------------------------------+
| 4. Bypass Setup Dialog (Enter "no"), then enter "enable"    |
+-------------------------------------------------------------+
                              |
                              v
+-------------------------------------------------------------+
| 5. CRITICAL: copy startup-config running-config             |
+-------------------------------------------------------------+
                              |
                              v
+-------------------------------------------------------------+
| 6. Set New Password: enable secret <new-password>           |
+-------------------------------------------------------------+
                              |
                              v
+-------------------------------------------------------------+
| 7. Restore Boot Register: config-register 0x2102            |
+-------------------------------------------------------------+
                              |
                              v
+-------------------------------------------------------------+
| 8. Commit to NVRAM: copy running-config startup-config      |
+-------------------------------------------------------------+

Step 1: Instruct ROMMON to Ignore NVRAM

At the ROMMON prompt, change the virtual configuration register to 0x2142 and restart the hardware:

rommon 1 > confreg 0x2142
rommon 2 > reset

(Note: On certain platforms, use boot instead of reset to initiate the reload.)

Step 2: Bypass the Initial Configuration Dialog

Because NVRAM was skipped, the router boots into a blank configuration. When prompted:

Would you like to enter the initial configuration dialog? [yes/no]: no

Press Return to receive the unauthenticated user EXEC prompt:

Router>

Step 3: Enter Privileged Mode and Load the Existing Settings

Enter privileged EXEC mode. Because the configuration was ignored, no password will be requested:

Router> enable
Router#

Warning: You must copy the saved configuration from NVRAM into active RAM before making any password changes. Running write memory or copy running-config startup-config at this stage will overwrite your production configuration with a blank file.

Execute the following command to merge your production settings into RAM:

Router# copy startup-config running-config

The router prompt changes from Router# to your original configured hostname (e.g., Branch-Edge#).

Step 4: Overwrite the Administrative Password

Enter global configuration mode and configure a new administrative secret. You can also reconfigure local user accounts if your device uses local authentication databases:

Branch-Edge# configure terminal
Branch-Edge(config)# enable secret YourNewStrongPassword123!
Branch-Edge(config)# username admin privilege 15 secret YourAdminPassword123!

Ensure administrative interfaces that may have defaulted to administrative down are active:

Branch-Edge(config)# interface GigabitEthernet0/0/0
Branch-Edge(config-if)# no shutdown
Branch-Edge(config-if)# exit

Step 5: Restore the Default Configuration Register

You must return the configuration register to its default value (0x2102). If you skip this step, the router will ignore its startup configuration every time it reboots:

Branch-Edge(config)# config-register 0x2102
Branch-Edge(config)# exit

Step 6: Save Your Changes to NVRAM

Verify the register setting and write the merged running configuration back to startup NVRAM:

Branch-Edge# show version

(Look at the final line of the output; it should indicate that the configuration register will be 0x2102 at the next reload.)

Commit the configuration:

Branch-Edge# copy running-config startup-config
[OK]

The password is now reset, the configuration register is restored, and all interfaces and routing protocols remain operational.

How to Factory Reset a Cisco Router to Default Settings

If you do not need to preserve existing settings, wiping the router to factory defaults removes all custom passwords, interface parameters, access lists, and cryptographic keys.

Scenario A: Resetting from Privileged EXEC Mode (Password Known)

If you already have administrative access and want to sanitize the router:

Connect via console or SSH and enter privileged EXEC mode:
text Router> enable Router#
Erase the NVRAM configuration storage:
text Router# write erase
(Alternatively: erase startup-config)
Confirm the prompt by pressing Enter:
text Erasing the nvram filesystem will remove all configuration files! Continue? [confirm] [OK] Erase of nvram: complete
If the device uses VLAN databases or cryptographic keys stored in flash, delete those files manually:
text Router# delete flash:vlan.dat
Reload the router, selecting no if prompted to save changes:
text Router# reload System configuration has been modified. Save? [yes/no]: no Proceed with reload? [confirm]

Scenario B: Factory Reset Without the Password (Locked Out)

If you are locked out and want to wipe the router, combine the ROMMON bypass procedure with an NVRAM purge:

Follow the console Break sequence steps detailed above to enter ROMMON.
Instruct the router to ignore NVRAM:
text rommon 1 > confreg 0x2142 rommon 2 > reset
Type no at the initial configuration dialog and enter privileged EXEC mode:
text Router> enable
Immediately wipe the NVRAM startup file without copying it into RAM:
text Router# write erase [OK] Erase of nvram: complete
Reset the configuration register back to the standard boot setting:
text Router# configure terminal Router(config)# config-register 0x2102 Router(config)# end
Reboot the system into an out-of-the-box default state:
text Router# reload Proceed with reload? [confirm]

Model-Specific Recovery Architecture and Official Cisco Documentation

Cisco’s routing hardware spans distinct generations and operating systems. While the standard 0x2142 register value applies to most classic platforms, variations exist between classic Cisco IOS, Cisco IOS XE, and modular edge platforms.

Classic Cisco IOS Routers (ISR G1 & G2: 1800, 1900, 2800, 2900, 3900 Series)

Architecture: Uses a standard, monolithic Cisco IOS binary with a software-managed NVRAM configuration register.
ROMMON Commands: confreg 0x2142 to bypass, followed by reset or boot.
Register Reset: Handled in global configuration mode via config-register 0x2102.
Security Caveat: If service password-encryption was configured, legacy type 7 passwords cannot be viewed as plain text without reversible tools, but enable secret (type 5, 8, or 9 hashes) must always be completely replaced.

Cisco IOS XE Platforms (ISR 4000 Series & Catalyst 8000 Edge Platforms)

Architecture: Operates on a Linux-based underlying OS (Cisco IOS XE) that mounts storage devices differently from legacy hardware.
ROMMON Variables: While modern ROMMON versions still accept confreg 0x2142, certain IOS XE models utilize specific environment variables. If confreg is unavailable, use:
text rommon 1 > ROMMON_CONFIG_FILE="" rommon 2 > boot
IOS XE Register Setting: In global configuration mode on IOS XE 16.x and 17.x, the command config-register 0x2102 is supported, but settings are written directly to platform NVRAM variables:
text Router(config)# config-register 0x2102
Password Recovery Disable: If an administrator enabled no service password-recovery, entering ROMMON and issuing confreg 0x2142 triggers an alert stating that password recovery is disabled. Proceeding will trigger a mandatory wipe of NVRAM to protect intellectual property and enterprise keys.

Accessing Official Cisco Technical Documentation

For detailed, hardware-specific guides across legacy and active product lines, consult Cisco’s official documentation via the Cisco Support Portal:
* Product Field Guides: Navigate to cisco.com > Support > Product Support > Routers.
* Password Recovery Index: Search for Cisco Document ID 6140 (Password Recovery Procedures), which indexes hardware-specific Break sequences, baud rates, and register tables for legacy (2500/2600) through enterprise (ASR 1000/Catalyst 8300) hardware.

Resetting Passwords on Cisco Small Business RV Series Routers

Cisco Small Business routers (such as the RV042, RV160, RV260, RV340, and RV345 series) run specialized embedded firmware rather than enterprise Cisco IOS. They do not feature a standard ROMMON prompt and rely instead on a physical hardware reset button.

+-----------------------------------------------------------+
| 1. Locate physical recessed RESET pinhole button          |
+-----------------------------------------------------------+
                             |
                             v
+-----------------------------------------------------------+
| 2. Depress with paperclip for 10 to 15 seconds (Powered)  |
+-----------------------------------------------------------+
                             |
                             v
+-----------------------------------------------------------+
| 3. Observe Power/Diag LED flashing amber/green            |
+-----------------------------------------------------------+
                             |
                             v
+-----------------------------------------------------------+
| 4. Connect PC to LAN port (DHCP pool: 192.168.1.0/24)     |
+-----------------------------------------------------------+
                             |
                             v
+-----------------------------------------------------------+
| 5. Browse to https://192.168.1.1 (Login: cisco / cisco)   |
+-----------------------------------------------------------+

Step 1: Perform the Pinhole Hardware Reset

Verify the router is connected to power and the Power LED is illuminated and stable.
Locate the small, recessed RESET pinhole button on the back or side panel.
Insert an unfolded paperclip or SIM ejector tool into the pinhole until you feel the switch depress.
Press and hold the button continuously for 10 to 15 seconds.
Release the button when the Power or Diagnostic LED begins blinking rapidly or switches color.
Allow 2 to 3 minutes for the router to clear internal flash memory and reboot into its default state.

Step 2: Establish Default Management Connectivity

Connect an Ethernet cable from your computer’s network interface card to any numbered LAN port on the RV router (do not use the WAN/Internet port).
Configure your computer’s network adapter to obtain an IP address automatically via DHCP. The router assigns addresses in the 192.168.1.0/24 subnet.
Open a web browser and navigate to the default gateway address:
text https://192.168.1.1
Bypass any self-signed SSL certificate warnings in your browser to access the management interface.

Step 3: Authenticate with Factory Credentials

Upon your first successful login, the firmware forces an administrative credential change. Enter a complex password containing uppercase letters, lowercase letters, numbers, and symbols to establish secure local access.

Conclusion

Resetting a Cisco router password depends on the hardware tier and whether you need to preserve existing configurations. On enterprise Cisco IOS and IOS XE routers, establishing console connectivity, transmitting a Break signal during boot, and adjusting the virtual configuration register to 0x2142 allows you to recover passwords without sacrificing your operational baseline. For Cisco Small Business RV-series devices, a physical pinhole reset quickly restores out-of-the-box web GUI access. Once administrative control is restored, make sure to back up your running configuration to an off-box TFTP or SCP server and keep your emergency console cables on hand.

Please follow and like us:

100% FREE Cisco, PMP & other IT Certification Packs