Hikvision cameras are among the most widely deployed video surveillance devices worldwide, from corporate environments to small offices and home setups. However, security concerns around default credentials have made proper setup a critical IT task.
In the past, Hikvision cameras shipped with default passwords, making them vulnerable to attacks if users did not change them. Recent firmware changes have removed default passwords entirely, requiring a secure password to be created during the initial setup.
In this guide, we will cover:
- The history of Hikvision default passwords
- Current setup requirements
- Default IP addresses for quick access
- Resetting passwords using SADP or factory reset
- Best security practices for IT professionals
By the end of this article, you’ll understand how to manage, secure, and troubleshoot Hikvision cameras in enterprise or SMB environments.
Hikvision Default Passwords: Past vs. Present
Older Models (Firmware before 2017-2018)
For older cameras, Hikvision shipped devices with simple default credentials. These included:
| Device | Username | Default Password | Notes |
|---|---|---|---|
| IP Camera, NVR, DVR | admin | 12345 | Most older firmware models |
| IP Camera, NVR, DVR | admin | 123456 | Alternative default for some models |
| IP Camera, NVR, DVR | admin | admin | Rare legacy devices |
These default passwords were easy targets for hackers, and many incidents of compromised CCTV systems were reported globally. Leaving the default password unchanged on devices accessible over the internet was considered a severe security vulnerability.
New Models (Firmware 2018+)
Hikvision removed default passwords entirely. The username remains admin, but during initial setup, users must create a strong password before activating the device.
This approach ensures:
- Stronger baseline security for all devices
- Compliance with modern cybersecurity standards
- Reduction of automated attacks targeting known default credentials
Pro Tip for IT Pros: Always check the firmware version. Cameras with firmware older than 2018 may still have default passwords. If deploying older devices, consider firmware upgrades immediately after setup.
Default IP Address
Hikvision IP cameras are typically configured with the following default IP:
- Default IP:
192.0.0.64
When connecting the camera to your network, you may need to change this to match your local subnet. For example, if your network uses 192.168.1.x, update the camera’s IP accordingly.
- Subnet mask: Usually
255.255.255.0 - Gateway: Matches your network’s default gateway (e.g., router IP)
Changing the IP ensures the camera integrates seamlessly into your network and avoids IP conflicts.
Why Hikvision Eliminated Default Passwords
Hikvision recognized that default passwords were a major attack vector. Many cameras exposed to the internet remained accessible to anyone who knew the default credentials, leading to:
- Unauthorized access to live camera feeds
- Exposure of sensitive corporate or personal data
- Integration into botnets for DDoS attacks
By requiring users to create a strong password at first use, Hikvision reduced the likelihood of successful attacks on newly deployed devices.
IT Insight: Even with the new password policy, network segmentation and VPN access remain critical when cameras are accessible remotely. Never expose cameras directly to the internet without additional safeguards.
Resetting a Lost Hikvision Password
For enterprise IT administrators, losing the admin password can happen. Hikvision provides tools for password recovery and reset:
Using SADP Tool
The SADP (Search Active Devices Protocol) tool is the primary method to reset passwords on modern cameras.
Steps:
- Download and install the SADP tool from Hikvision’s official website.
- Run SADP and locate your camera on the network.
- Select the camera and click Forgot Password.
- Export the reset request file and send it to Hikvision support or your dealer.
- Hikvision provides a reset code to restore access.
This method ensures secure password recovery without compromising the device’s integrity or needing a physical factory reset.
Factory Reset for Hikvision Cameras
In situations where SADP cannot be used, a physical factory reset restores the camera to its un-activated state:
- Press and hold the reset button for a total of 90 seconds.
- After the first 30 seconds, disconnect the network cable but keep holding the reset button. Wait another 30 seconds.
- Reconnect the network cable and continue holding for the final 30 seconds.
- Release the reset button.
After this, the camera will require reactivation, including creating a new admin password.
⚠️ Warning: Factory resetting a camera will erase all configurations, including network settings, user accounts, and video storage settings. Always back up NVR or DVR configurations when possible.
Best Practices for IT Professionals
Securing Hikvision cameras is not just about changing the default password. Here are professional recommendations:
- Update Firmware Immediately: Ensure all cameras and NVRs run the latest firmware to patch vulnerabilities.
- Enforce Strong Passwords: At least 12 characters with uppercase, lowercase, numbers, and symbols.
- Use VPN or VLAN Segmentation: Keep cameras on a dedicated network segment to minimize exposure.
- Disable Unused Services: Turn off UPnP, Telnet, or other remote management protocols if not required.
- Monitor Logs: Regularly review access logs for suspicious activity.
- Regular Backup: Back up configuration files from NVRs and cameras to quickly restore settings after resets.
From my experience managing multi-site deployments, IT teams often overlook network segmentation. Isolating cameras from the main LAN reduces the risk of lateral movement if a device is compromised.
Hikvision cameras have evolved significantly from the days of default passwords. While older models may still use 12345 or similar credentials, modern devices require strong passwords at activation, reflecting a critical shift in cybersecurity practices.
For IT professionals, understanding the history, default IPs, reset procedures, and security best practices is essential for:
- Safe deployment of cameras in enterprise or SMB environments
- Mitigating the risk of unauthorized access
- Ensuring compliance with cybersecurity standards
Remember: physical and network security go hand-in-hand. A camera is only as secure as the credentials and network it’s connected to.
By following these guidelines, IT administrators can confidently deploy, manage, and secure Hikvision cameras while minimizing the risk of unauthorized access or data breaches.
From my early days on the helpdesk through roles as a service desk manager, systems administrator, and network engineer, I’ve spent more than 25 years in the IT world. As I transition into cyber security, my goal is to make tech a little less confusing by sharing what I’ve learned and helping others wherever I can.