Hikvision password reset

Let’s consider several ways to reset the password in the Hikvision video camera and DVR. Method 1

This tool will help you reset Hikvision password on older firmware versions (2014-2016)

This program uses a backdoor in the firmware of Hikvision IP cameras since 2014.2016 (ICSA-17-124-01). Through the program, you can reset the Hikvision password to the standard password 12345abc.

.NET Framework 4.5.2 must be installed on your computer on which the IP camera will be configured.

Download and run HikPasswordHelper, follow 5 easy steps to reset your password, see the picture.

Please note that the IP address of the cameras must be in the same local network with your computer.

New firmware versions are NOT affected by this vulnerability, so they will not be reset.

Backdoor versions of the tested firmware

Method 2

Possible problems. If SADP does not find the device, then download and install a network scanner winpcap (off. Site), then restart your computer. If all devices are detected normally, but only a specific camera is not visible, then there are either problems with the connection or with the camera firmware. It is recommended to flash the device, for example using TFTP.

Method 3

This method uses a backdoor in cameras with firmware 5.4.4 and below.

Go to the following IP address in your browser

https: // ip_cam / System / configurationFile? Auth = YWRtaW46MTEK Where, ip_cam. Camera IP addresses.

You can find out the IP using the SADP program

If the current firmware version has a vulnerability, then an encrypted file, configurationFile. After that, the configurationFile file should be decrypted. To do this, upload it to the server using the link below and click Decrypt. After decryption, download the file to your computer

The file that you downloaded from the server should be uploaded to the site with an online HEX editor, and in the Search window, enter the camera login. Next you will see the password for the camera

If this method does not work for you and the technical support team refused to reset your password, you can use the paid password reset service https://world-CCTV.Space/manual/

By the way, there is a simple trick, by completing how you can find out the forgotten password of the Hikvision dashcam with firmware in which there is no backdoor. To do this, you need to connect a non-activated camera with vulnerable firmware to it, NVR (video recorder) activates it using your password.

Using method 3, we find out the password that the camera received, this password will also be sent to the registrar.

Please note, before connecting an inactive IP camera to the NVR, check that the firmware on the camera is vulnerable, otherwise it will be necessary to find out the password on the camera.

If your firmware does not contain a backdoor, and you were unable to recover the password on the hikvision IP camera, there is another way for you to reset the password on the camera using the SADP utility. You can download PDF instruction

Method 4

Flashing the device using a TFTP server

In some video cameras and Hikvision DVR, when updating the firmware with the introduction of a TFTP server, the configuration is also reset, which leads to a password reset. For more information on working with a TFTP server, see our other article, Hikvision Firmware Recovery

In firmware versions where there is no automatic start of the TFTP server at device startup, executing the update command from the U-Boot shell, for a simple update and upf, for updating with clearing the configuration (resetting the settings and password) can help

Reset password on Hikvision devices using SADP utility. Reset password on Hikvision devices using SADP utility

There are several steps you need to take to reset your password on Hikvision devices.

• You need to download and install the SADP utility (version v3.0.0.2 and higher). You can download it here.
• Reboot the device and start SADP. After starting SADP, we will see a window like this:

It is worth paying attention to the column “Security” “Active”. Device active and password set.

Select the desired device, marking it with a checkbox and click the inscription “Forgot Password“.

A window with instructions will appear (if at this stage you saw another window, go to step 12):

Following the instructions, we will perform the first step: press the “Export” button and select the folder where the exported file will be saved.

At the end of this process, we will see a window: (The device cannot be rebooted after exporting the file)

Next, go to the selected folder and look for a file with the “.Xml” extension. The file can be called “DeviceKey” or its name will contain the device model, serial number and at the end the date and time of upload.

We send this file to our support, along with confirmation that you have purchased the device. If we know you. Write what you are called in our database. If we don’t know you. Send us something to prove that you own the device: a receipt, a photo of the box, a warranty card with a serial number. This is necessary in order to exclude password reset by unscrupulous persons.

After your application is approved, a new file “Encrypt.Xml” will be sent in response to the letter. Save it to your computer.

We carry out the fourth point again and, following the instructions, go to the second step:

Specify the path to the received file, set and confirm a new password, and press the “Confirm” button. The password must consist of at least 8 characters (upper and lower case letters of the English alphabet, numbers, special characters).
If everything is done correctly, we will see a window and the specified password will be set on the device.

The password will be set on the device. If, due to turning off the device or for other reasons, there is a message that it is impossible to apply new data, then the procedure will need to be repeated from the first point.

To remove the file that you send to us, and pull-up sent by us, in the second step you have only 1 calendar day, and you cannot turn off or restart the device to perform the last operation.

If the device is old or with old firmware, and clicked on the “Forgot Password” inscription, you will see this window:

Then you need to copy the complete device model (“Device Serial No.” field in SADP) and the start date (“Start Time” field in SADP).

Data Must be in text format, screenshots and photos are not suitable.

Send this data to our support (the device cannot be rebooted after that). In response, we will send a reset code. The password will be reset to standard. 12345.

Possible reset problems:

Error: Get key error

When exporting a key XML file, SADP displays a Get key error message

Possible reasons: 1. PC and device are connected through more than one switch, which DO NOT support multi-cast function 2. PC and device are connected through a router, and NAT function is enabled on both the router and the device 3. The IP address of the PC changed while the software was open SADP 4. Incorrect device firmware

Possible solutions: 1. When the device and PC are connected through more than one switch, please make sure the routers support the multi-cast function, as it is necessary for the device activation and reset process. 2. When the PC and the device are connected through a router, try to disable the NAT function in the router and the device. When NAT is enabled, the device does NOT receive multi-cast messages. 3. When the PC and device are directly connected and the PC’s IP address has changed while SADP was open, just restart SADP. 4. Try to flash the device, for example Using TFTP.

Error: Reset password failed

When exporting the key file, SADP says: reset password failed.

Possible reasons: 1. Perhaps you are trying to use an already used or old xml key file. 2. You may have generated a new xml key for sending, in which case the old Sbrc files are no longer suitable. 3. There may be problems with the file sent to you 4. PC address changed while SADP was open

Possible solutions: 1. Make sure you are using the current file = key to unlock 2. Make sure that you have NOT rebooted the device or generated a new file key for sending. 3. Invite a new key file to technical support 4. When the PC and the device are connected directly and the PC IP address has changed while SADP was open, just restart SADP