What Is the Default Username and Password for Cisco Switches?

TL;DR: Most Cisco enterprise switches have no default username or password and require initial console setup for security. Only Catalyst 1200/1300 series use “cisco”/“cisco” with 192.168.1.254 as the default IP and force a change at first login. Always enforce strong credentials and secure management protocols.

When setting up a new Cisco switch, one of the first questions network engineers and IT administrators ask is about the default login credentials. Understanding these defaults—and why many Cisco switches intentionally do not have them—is critical for maintaining network security during initial deployment and ongoing operations.

Do Cisco Switches Have a Default Username and Password?

For Cisco Catalyst 1200 and 1300 Series switches, designed for SMB and branch environments, the default credentials are:

• Default Username: cisco
• Default Password: cisco
• Default IP Address: 192.168.1.254 (/24 subnet)

These credentials must be changed immediately upon first login as part of the initial Day Zero configuration.

For enterprise-grade Cisco switches (Catalyst 2960, 9300, 3850, 3750-X, etc.), there is no default username or password. You must configure login credentials manually during the first console-based setup, which prevents vulnerabilities associated with known default logins.

Default Login Credentials for Cisco Switch Models

Why Most Cisco Switches Do Not Have Default Passwords

For security best practices, Cisco intentionally does not provide default logins on most enterprise switches. Requiring manual credential setup prevents exposure of devices with easily discoverable default credentials, reducing the attack surface for unauthorized access.

Even on the Catalyst 1200/1300 series, after logging in with “cisco/cisco,” you must change to a strong password that meets Cisco’s complexity requirements:

• Minimum 8 characters
• Mix of uppercase, lowercase, numbers, and symbols
• No repeated or sequential characters
• No manufacturer-related terms (e.g., “cisco”, “catalyst”)
• No passwords from known breached lists

How to Reset a Cisco Switch Password

If you forget the password on a Cisco switch:

• Access the switch physically using the console port.
• Follow the password recovery procedure for your model.
• Password recovery typically preserves the configuration if enabled.
• Note: If Secure Sensitive Data (SSD) protection is enabled, it may block password recovery.

For detailed, step-by-step instructions on Cisco 9300 models, see: Cisco 9300 Password Recovery Guide.

Best Practices After First Login

1. Change Default Credentials Immediately: Enforced on 1200/1300, recommended for all devices.
2. Enforce Strong Password Policies: Follow Cisco or organizational complexity guidelines.
3. Enable Secure Management: Use SSH instead of Telnet, HTTPS instead of HTTP, and centralized authentication (RADIUS/TACACS+).
4. Limit Login Attempts: Enable login lockout policies to prevent brute-force attacks.
5. Perform Regular Backups: Backup configurations securely while excluding or encrypting sensitive data.

FAQ

Q1: What is the default IP address of a Cisco 1300 switch?

192.168.1.254 with a /24 subnet for initial configuration during Day Zero setup.

Q2: What is the default username and password for a Cisco 1200 switch?

Username: “cisco”; Password: “cisco.” You must change these on first login for security.

Q3: What is the username and password for Cisco admin?

There is no universal “Cisco admin” credential. Catalyst 1200/1300 use “cisco/cisco,” while most enterprise models require manual setup during initial configuration.

Q4: What is the default username and password for Cisco switches?

Only Catalyst 1200/1300 use “cisco/cisco” by default. Most Cisco switches have no default credentials and require manual configuration.

Q5: What if I forget my Cisco switch password?

Perform password recovery using the console port. For Cisco 9300, see: Cisco 9300 Password Recovery Guide.

Conclusion

Understanding the default Cisco switch username and password is essential for secure network setup. Only the Catalyst 1200/1300 series have default credentials (“cisco/cisco”), which must be changed immediately, while most enterprise Cisco switches require manual credential configuration. By enforcing strong password policies, enabling secure management, and performing regular backups, you can maintain a secure and resilient Cisco network environment.

Need secure Cisco switch configurations or models for your network? Visit router-switch.com for tailored guidance, switches, and licensing to support your deployment.