Admin Password Display on Jetpack
ROBMCC10
Enthusiast - Level 2

How do you hide the admin password on the jetpack? By default it shows, which is goofy. Someone steals your device and it's [Removed] until you convince Verizon to suspend it.

profanity removed as required by the Verizon Wireless Terms of Service

Message edited by Verizon Moderator

0 Likes
1 Solution

Correct answers
Re: Admin Password Display on Jetpack
John_Getzke
Champion - Level 1

> How do you hide the admin password on the jetpack?

You hide or secure the Jetpack itself from unwanted or malicious hands.  Storing and displaying the defaults is a common maintenance best practice for many network devices.  Passwords are there primarily to stop remote connections not someone with physical access to the device itself.

Few problems with coming up with a better system:

1. If you could disable the password display someone with physical access could reset the Jetpack to turn that feature back on again since it is the default functionality.

2. For VZW to remove the feature to display the password by default they would have to replace it with some other way for users to lookup the default password for support purposes.

3. Default passwords should all be unique to avoid common work arounds like static defaults stored in user manuals.

4. People rarely keep the documentation with them so we can rule out sending them any documentation as a reliable way to support the devices in the field.  This is the same risk as losing the device in the first place.

5. VZW is not going to keep a database of all the default passwords floating around if you were to call in and ask them.

6. Algorithms to calculate the default passwords based on the ID of the device has the same problems as storing the defaults in the user manual once users figure out the algorithm as Manufacturers like Novatel used to do with early Jetpack models.

7. Two Factor Authentication is ideal for any password scenario but it requires or assumes users have smartphones with supported apps, text or a key fab that would have to be manufactured as well as readily available whenever admin access is required.

>Someone steals your device and it's [Removed] until you convince Verizon to suspend it.

Yes, that is the risk of losing or not physically securing your Jetpack.  Do what you have to do to keep your Jetpack safe.  Contact VZW as soon as you believe your Jetpack is stolen to suspend or terminate it.  Work with reps to identify any malicious usage and charges from there.

View solution in original post

0 Likes
Re: Admin Password Display on Jetpack
John_Getzke
Champion - Level 1

> How do you hide the admin password on the jetpack?

You hide or secure the Jetpack itself from unwanted or malicious hands.  Storing and displaying the defaults is a common maintenance best practice for many network devices.  Passwords are there primarily to stop remote connections not someone with physical access to the device itself.

Few problems with coming up with a better system:

1. If you could disable the password display someone with physical access could reset the Jetpack to turn that feature back on again since it is the default functionality.

2. For VZW to remove the feature to display the password by default they would have to replace it with some other way for users to lookup the default password for support purposes.

3. Default passwords should all be unique to avoid common work arounds like static defaults stored in user manuals.

4. People rarely keep the documentation with them so we can rule out sending them any documentation as a reliable way to support the devices in the field.  This is the same risk as losing the device in the first place.

5. VZW is not going to keep a database of all the default passwords floating around if you were to call in and ask them.

6. Algorithms to calculate the default passwords based on the ID of the device has the same problems as storing the defaults in the user manual once users figure out the algorithm as Manufacturers like Novatel used to do with early Jetpack models.

7. Two Factor Authentication is ideal for any password scenario but it requires or assumes users have smartphones with supported apps, text or a key fab that would have to be manufactured as well as readily available whenever admin access is required.

>Someone steals your device and it's [Removed] until you convince Verizon to suspend it.

Yes, that is the risk of losing or not physically securing your Jetpack.  Do what you have to do to keep your Jetpack safe.  Contact VZW as soon as you believe your Jetpack is stolen to suspend or terminate it.  Work with reps to identify any malicious usage and charges from there.

0 Likes