wi-fi password is not hidden in AT&T Arris NVG599

You need access to your home wifi network in order to get to the gateway settings, so a user would already have the wifi password (unless wifi is turned off and everyone is ethernet connected). The displayed wifi password is something the user already knows.

You can just change the access code to the RG... The access code is what gives you access to enter the RG via the 192.168.1.254 URL.

Not true. I set up a guest SSID, and the guests were able to access this page: http://192.168.1.254

All the passwords were visible. It didn't even prompt for Access Code (either the default on the side of the router or the version I changed to). This is a major security hole. Please patch ASAP. Thanks!

@World_B_Free, to clarify:

You state that you connected to your Wi-Fi network using the Guest SSID on the NVG599 and were able to see the home page of the NVG599 including the non-Guest SSID and access code.

Sigh.  SMH.  @ATTU-verseCare, would you please run this up the food chain?  This renders the guest SSID/access code absolutely worthless.

UPDATE: There is an ACE who just recently received an NVG599 and his testing revealed that the Guest SSID places connecting users on a different IP range that has no access to 192.168.1.xxx.  World_b_Free, can you give some more detail on what you saw?  Your IP address for the guest-attached PC, etc.?

Hi,

We just tested on our end, and the guest network operates on a completely different subnet. You can change it to whatever you want, but it will not allow it to be on the same subnet as the primary network. With the guest subnet, there is no access to the GUI. If they are still able to get on the primary network, we suggest changing the password to it so that users do not have access to it.

-ATTU-verseCare

Heavy sigh.. I can remember the days when the worst things kids did, was pretty minor.

Nowadays, they seem more able to get into things they should not, ANd don't respect the boundries set for them, so just push until they cross the line, then keep pushing.

I had no real point beyond wondering what has become of kids today.

I'm in the same situation. My old one was replaced by the NVG599, while I was away. So the 18yr old had the network name and pass before me. (it's also on the equipment)   I thought I'd go to my ip address and change the default network name and password, as I've done in the past,  so I did. Gave them the guest network and password and created a seperate main network name and password over-riding the default one given to us. When the kids could'nt connect their chromecast receivers to the "guest ssid", my son simply went on his laptop pulled up the ip that showed ALL the network names and passwords created and entered the original default network name and password (that was on the equipment)  that I thought was changed!!! I am totally outdone, how can this be so easy seen?

I was hoping to come here for a solution but I see that's a prayer unanswered. Like other commenters, I have a teen whose very crafty. I've changed the wifi password only to login to his device or the home computer to find he can still gain access even though I've personally added the new password to his phone. To sum it up quickly, this is my issue.....I take my teenagers phone away as punishment only to find out that he's borrowered someone else's old iPhone to carry on with everything he wants to do. I change the password and he googles how to change it back although he quickly figures out that he doesn't have to because it's displayed easily just by following google instructions. I'm outraged! Why can't the password be hidden verses all this conversation about guests accounts?!?? Anybody can figure out your password....even if you type it in for them on their devices. I thought I had at least one good thing in my corner, the box is in my room. BUT NONE OF THAT MATTERS?!? I could even go so far and say someone could access my home computer without my knowledge, but yet there's no added security to protect me from this. What's AT&Ts liability if someone breaks into my home, gains my password through my home computer, and then looks up child porn while in my connection area under my internet connection??? This is the last straw for me. Between the outages, mutiple fried dvr's because of installation issues, having one of my boxes turned off because after a year of service and payment, AT&T had no records of me having 6 boxes instead of 5, and lack of security.....AT&T isn't what it used to be. Shout out to my 17 year old in the meantime!! I'm sure he's reasearching and finding loopholes. It will only be a matter of time before he gains access...and probably reads this forum. Like I said, he's crafty. Thanks AT&T, as I currently look into other providers, I'll constantly search my network for "mysterious logins" and inconvinence my entire family with daily password changes to keep my son from being apart of the next lifetime movie featuring his private parts floating in cyberspace.

@Tawannas

If your son is doing that, you might just want to do MAC filtering. The Wi-Fi password can stay the same when that is done. Just find the MACs of his devices(they're listed on the DHCP list or you can go into the device's settings/info to find it) and then go to the "MAC Filtering" tab of your wireless gateway's UI. Choose "Blacklist" and then choose his devices on the list to add and then save it. The devices with those MAC addresses won't be allowed to connect wireless, but they can connect wired(not like you can connect the phone wired anyway through any easy methods).

Just make a custom system access code(I assume you have) and don't write it down. Just memorize it for when you want to change it back to "Disabled" or "Blacklist".

Summary:

1) Use MAC Filtering in the UI.

2) Create a custom system access code you can remember. It can be changed from the UI.

He can still factory reset it pretty easily(like any device) just by holding down the button on the back unless you lock him out of the room.

You might want to try other methods to keep him from being stupid 😉 .