UniFi - Accounts and Passwords for Ubiquiti, UniFi OS and UniFi Devices

This article identifies the different account types that users can sign in to and details how each is initially created and, if necessary, changed.

Note: This article’s instructions apply to the latest version of UniFi OS. Your process may vary if you are not using an SSO account. As such, we recommend always staying up to date.

• Ubiquiti single sign-on account
  • Creating a Ubiquiti SSO account
  • Changing or resetting your password
• Local-only accounts
• Other credentials

Ubiquiti single sign-on accounts

Ubiquiti’s single sign-on (SSO) service allows users to centrally access every part of their UniFi systems, including UniFi OS Consoles via unifi.ui.com , the Network and Protect mobile apps, and the console’s local portal (by entering a console’s IP address into a web browser). It is also used to log in to the UI Community , UI Store , and UI Help Center .

Creating a Ubiquiti SSO account

1. Visit https://account.ui.com/ and click the Create Account button.
2. Fill in all the necessary fields and click Create
3. Open the verification email and complete the account creation process.

We recommend enabling two-factor authentication (2FA) via the Security tab at https://account.ui.com. To learn more about 2FA or accessing a locked account, please see this article.

From https://account.ui.com , you can also:

• Change your username, password, email, or other details.
• Set your session timeout preferences.
• Add payment methods for subscription services (e.g., UniFi LTE products).
• Enroll in Early Access / Beta programs to help evaluate new and upcoming products.
• View backups from compatible UniFi OS Consoles.

Local-only accounts

By default, you can use your UI SSO account to access a UniFi OS Console. To do so, either:

1. Log in remotely via unifi.ui.com , or
2. Log in locally by entering the console’s IP address into a web browser (Chrome is recommended).

You can also create and manage local-only admin accounts that do not use UI SSO. If you'd like your console to only be accessible locally, you can disable remote access by navigating to System Settings > Advanced, and toggling off Remote Access. To learn more about administrator roles and adding new administrators, see this article .

Other Credentials

Self-hosted UniFi Network setups

In a self-hosted setup, you have the option to either use your UI SSO account or create local-only login credentials via https://localhost:8443 . 

To invite other admins and receive password-reset emails, you must first configure the SMTP server by navigating to System Settings > Controller Configuration > Mail Server. For more information, see UniFi - How to Set Up the 'Forgot Password' Email Service.

Accessing a UniFi OS Console via SSH

Note: We do not recommend using SSH to access a UniFi OS Console. 

If you must use SSH to access a UniFi OS Console, you will need to enable SSH first. To do this:

1. Go to unifi.ui.com or enter the console’s IP address into your web browser.
2. Navigate to the UniFi OS System Settings > Advanced menu .
3. Enable the SSH toggle and enter an SSH password directly below. When you SSH into your device, please use the default username root with the password you chose.

If your console is not running UniFi OS, SSH may be enabled by default. Try the default credentials shown in the section below.

Need help learning how to use SSH? Take a look at this article .

Accessing a UniFi device via SSH

To access a non-console UniFi device via SSH, you will first need to set up Device SSH Authentication. These same credentials apply to all UniFi devices managed by the Network application.

To locate or change your device authentication credentials, launch UniFi Network and go to Settings > System Settings > Controller Configuration > Device SSH Authentication.

If you are trying to access your device and have never set these credentials before, the three possible default credential sets are:

• root / ubnt
• ubnt / ubnt
• root / your SSO account's password (account.ui.com)

Note: You can also use these credentials when locally accessing a UniFi Security Gateway (USG) by typing its IP address into a web browser.

Related Articles

How to Enable / Disable Two Factor Authentication (2FA)

UniFi Network - Device Adoption