This article identifies the different account types that users can sign in to and details how each is initially created and, if necessary, changed.
Note: This article’s instructions apply to the latest version of UniFi OS. Your process may vary if you are not using an SSO account. As such, we recommend always staying up to date.
Ubiquiti single sign-on accounts
Ubiquiti’s single sign-on (SSO) service allows users to centrally access every part of their UniFi systems, including UniFi OS Consoles via unifi.ui.com , the Network and Protect mobile apps, and the console’s local portal (by entering a console’s IP address into a web browser). It is also used to log in to the UI Community , UI Store , and UI Help Center .
Creating a Ubiquiti SSO account
- Visit https://account.ui.com/ and click the Create Account button.
- Fill in all the necessary fields and click Create
- Open the verification email and complete the account creation process.
We recommend enabling two-factor authentication (2FA) via the Security tab at https://account.ui.com. To learn more about 2FA or accessing a locked account, please see this article.
From https://account.ui.com , you can also:
- Change your username, password, email, or other details.
- Set your session timeout preferences.
- Add payment methods for subscription services (e.g., UniFi LTE products).
- Enroll in Early Access / Beta programs to help evaluate new and upcoming products.
- View backups from compatible UniFi OS Consoles.
Changing or resetting your password
- If you know your password:
- Go to account.ui.com and sign in.
- Select the Security tab and click Change Password.
- If you do not know your password:
- Go to account.ui.com and click Forgot password?
- Enter the email address associated with your account and send yourself a password-reset email
- Click the link in the email to create a new password.
If you lose access to your 2FA tokens, see this article for additional sign-in options.
Local-only accounts
By default, you can use your UI SSO account to access a UniFi OS Console. To do so, either:
- Log in remotely via unifi.ui.com , or
- Log in locally by entering the console’s IP address into a web browser (Chrome is recommended).
You can also create and manage local-only admin accounts that do not use UI SSO. If you'd like your console to only be accessible locally, you can disable remote access by navigating to System Settings > Advanced, and toggling off Remote Access. To learn more about administrator roles and adding new administrators, see this article .
Other Credentials
Self-hosted UniFi Network setups
In a self-hosted setup, you have the option to either use your UI SSO account or create local-only login credentials via https://localhost:8443 .
To invite other admins and receive password-reset emails, you must first configure the SMTP server by navigating to System Settings > Controller Configuration > Mail Server. For more information, see UniFi - How to Set Up the 'Forgot Password' Email Service.
Accessing a UniFi OS Console via SSH
Note: We do not recommend using SSH to access a UniFi OS Console.
If you must use SSH to access a UniFi OS Console, you will need to enable SSH first:
- Go to unifi.ui.com or enter the console’s IP address into your web browser.
- Navigate to the UniFi OS System Settings > Advanced menu.
- Enable the SSH toggle and enter an SSH password directly below.
To SSH into your device, run the following command in your terminal of choice (PowerShell or PuTTY on Windows, Terminal on Linux/mac):
ssh root@<ip-address>
If your console is not running UniFi OS, SSH may be enabled by default. Try the default credentials shown in the section below.
Accessing a UniFi device via SSH
To access a non-console UniFi device via SSH, you will first need to set up Device SSH Authentication. These same credentials apply to all UniFi devices managed by the Network application.
To locate or change your device authentication credentials, launch UniFi Network and go to Settings > System > Application Configuration > Device SSH Authentication.
If you are trying to access your device and have never set these credentials before, the three possible default credential sets are:
- root / ubnt
- ubnt / ubnt
- root / your SSO account's password (account.ui.com)
To SSH into your device, run the following command in your terminal of choice (PowerShell or PuTTY on Windows, Terminal on Linux/mac):
ssh <username>@<ip-address>