Default Password for Hikvision Cameras: What Applies and What to Do Instead

The short answer

Current Hikvision network cameras do not have a usable default password. When a new device is first powered on, it starts in an inactive state. It must be activated by creating your own password before anyone can log in. The username is typically "admin".

Older Hikvision cameras and recorders were widely reported to ship with the username "admin" and the password "12345". That combination only applies to legacy firmware. It will not unlock a device that has been activated or updated. If an older unit still accepts that login, treat it as a security problem and change the password immediately.

Evidence gap: the material supplied for this article contained no confirmed model lists, firmware versions or dates. This guide therefore does not say which specific models or firmware releases moved from a factory password to mandatory activation. Check your device's label, its documentation or the manufacturer's support channels to confirm how your model behaves.

Is it a network camera or a USB webcam?

Hikvision makes both networked security cameras and plain USB webcams for video calls. The password question only concerns the networked cameras. A USB webcam is normally recognized by the computer as a standard camera and microphone, with no login of its own. Access to its audio and video is then controlled by the operating system's privacy settings and by whichever conferencing app you allow to use it.

Why this matters for audio capture

Many network cameras include a built-in microphone or an audio input for an external mic. Anyone who can log in to the camera may be able to view the video and also listen to or record speech in the room. A camera protected only by a widely known factory login is effectively open to anyone who can reach it on the network.

In the US, recording audio is subject to consent rules that differ by state. Where a camera's microphone is enabled, organizations should check the legal requirements that apply to them. If audio capture is not needed, they may choose to disable it.

If you cannot log in

• Confirm the device is activated. Hikvision's SADP discovery tool and the device's web interface show whether a camera is inactive and allow you to set the first password.
• If the device was activated and the password is lost, use the reset options built into your model. Depending on the device, these may include security questions, a reserved email address, a key-file export and import, or a physical reset button.
• If none of those options are available, contact the manufacturer or the installer. Expect to prove ownership before a reset is provided.
• Do not rely on password lists or third-party unlocking tools. They will not work on properly activated devices, and they may introduce security risks.

Enterprise restrictions worth applying

• Set a unique, strong admin password during activation and store it in a managed password vault rather than on a label or shared sheet.
• Create separate user accounts with limited permissions instead of sharing the admin login.
• Disable the microphone and audio streaming on cameras where speech capture has no legitimate purpose.
• Keep firmware current, since updates address known security weaknesses.
• Place cameras on a separate network segment and avoid exposing their web interface directly to the internet.
• Turn off services and remote-access features you do not use.
• Audit devices periodically for any that still accept a legacy factory login.