Attackers scan IPv4 address space for open WinBox or SSH ports. If a MikroTik device has no password, an attacker can:
Over recent RouterOS versions (v6.x and v7.x), MikroTik has introduced a "default configuration" on many devices (e.g., ether1 as WAN, DHCP client, firewall). However, even with default configuration, the admin password remains blank unless explicitly set. mikrotik password default
Changing the default password is crucial to securing your Mikrotik device. Here are some reasons why: Attackers scan IPv4 address space for open WinBox
Enter admin as the login and leave the password field empty unless your device sticker says otherwise. Resetting a Forgotten Password ether1 as WAN
Changing the default password on a Mikrotik device is a straightforward process: