This thread will remain locked while I add everything I can remember.
I will update this as much as I can before opening it up for user contributions / modifications
Archived discussion can be found here https://forum.hashkiller.io/index.php?threads/archived-default-router-wpa-keys-keyspace-used.2715/
Most of the credit goes to @blandyuk for originally compilling this list
Still to Process / Unconfirmed
I will update this as much as I can before opening it up for user contributions / modifications
Archived discussion can be found here https://forum.hashkiller.io/index.php?threads/archived-default-router-wpa-keys-keyspace-used.2715/
Most of the credit goes to @blandyuk for originally compilling this list
| SSID | CHARACTER SET | LENGTH / FORMAT | NOTES | |
|---|---|---|---|---|
| 2WIREXXX | 0-9 | 10 | ||
| 3MobileWiFi | 0-9 a-z | 8 | ||
| 3WebCube#### | 0-9 a-f A-F | 8 | ||
| 3Wireless-Modem-XXXX | 0-9 A-F | 8 XXXX???? | The first 4 keyspace are the same as the 4 characters on the SSID | |
| Alice_XXXXXXXX | 0-9 a-z | 24 | ||
| AOLBB-XXXXXX | 0-9 A-Z | 8 | ||
| ATT### | 0-9 | 10 | ||
| ATTxxxx 0000 | 0-9 A-Z | 10 | ||
| ATTxxxxxxx | a-z symbols | 12 | ||
| belkin.xxx | 2-9 a-f | 8 | ||
| belkin.xxxx | 2-9 a-f (or A-F tbc) | 8 | ||
| Belkin.XXXX | 0-9 A-F | 8 | ||
| Belkin_XXXXXX | 0-9 A-F | 8 | ||
| BELL### | 0-9 A-F | 8 | ||
| BELL#### | 0-9 A-F | 10 | ||
| BigPondXXXXXX | 0-9 A-F | 10 | ||
| BOLT!SUPER 4G-XXXX | 0-9 | 8 XXXX???? | The first 4 digits are the same as the 4 digits on the SSID | |
| BrightBox-XXXXXX | word-word-word | - 3-4-5 in any order | ||
| BTHomeHub-XXXX | 0-9 a-f | 10 | ||
| BTHomeHub2-XXXX | 2-9 a-f | 10 | ||
| BTHub3 | 2-9 a-f | 10 | ||
| BTHub4 | 2-9 a-f | 10 | ||
| BTHub5 | 2-9 a-f | 10 | ||
| BTHub6 | 0-9 a-z A-Z | 10 | ||
| BT-XXXXXX (Smart Hub 2) | 0-9 a-z A-Z | 14 | ||
| CenturyLinkXXXX | 0-9 a-f | 14 | ||
| Cisco | 0-9 a-f | 26 | ||
| Digicom_XXXX | 0-9 A-Z | 8 | ||
| DJAWEB_##### | 0-9 | 10 | ||
| Domino-XXXX | 0-9 A-F | 8 | ||
| DMTOU_XXXX | 0-8 A-G | 8 | ||
| E583x-xxxx | 0-9 | 8 | ||
| E583x-xxxxx | 0-9 A-F | 8 | ||
| EasyBox 904 LTE | 0-9 a-z A-Z | 9 | ||
| EasyBox-###### | 0-9 A-F | 9 | ||
| EEBrightBox-XXXXXX | word-word-word | - 3-4-5 in any order | ||
| EE-XXXXXX | word-word-word | - 3-4-5 in any order | ||
| FRITZ!Box Fon WLAN #### | 0-9 | 16 | ||
| FRITZ!Box XXXX (digits) | 0-9 | 20 | ||
| FrontierXXXX | 0-9 | 10 | ||
| Hitron | 0-9 A-Z | 12 | Serial # possible key | |
| INFINITUM#### | 0-9 | 10 | ||
| iPhone 5 | lower word + 4 digits (0-9) | - | ||
| Keenetic-XXXX | 0-9 a-z A-Z | 8 | ||
| Linkem_XXXXXX | 0-9 | 8 | ||
| MEO-###### | 0-9 A-F | 10 | ||
| mifi2 | 0-9 A-Z | 13 | ||
| MiFibra-XXXX | 0-9 a-z A-Z | 8 | (Spanish) From seen examples - io ? | |
| MobileWifi-xxx | 0-9 | 8 | ||
| MYWIFI (EE) | MYWIFI + 4 Digits | 10 | ||
| NETGEARXX | Adjective + Noun + 3 Digits | - | ||
| Netia-XXXXXX | 0-9 a-f | 13 | ||
| NOWTVXXXXX | NBPYVLMRXTCFWDSQ | 10 | Same as SkyQ | |
| ONOXXXX | 0-9 | 10 | ||
| Orange-0a0aa0 | 0-9 a-f | 8 | ||
| Orange-AA0A00 | 0-9 A-F | 12 | ||
| Orange-XXXX | 2345679ACEF | 8 | ||
| PLDT | PLDTWIFI + Last 5 of MAC | 13 | ||
| Plusnet Broadband UK | 0-9 a-z A-Z | 64 | ||
| PlusnetWireless-XXXXXX | 0-9 A-F | 10 | ||
| PLUSNET-XXXXXX | 0-9 a-f | 10 | ||
| Sitecom_XXXX | 0-9 A-F | 8 | ||
| SKYXXXXX | EBWDCFAXRYVPTSUQ | 8 | ||
| SkyQ - SKYXXXXX | NBPYVLMRXTCFWDSQ | 10 | ||
| SmartRG | 0-9 a-f | 10 | ||
| SpeedTouchXXXXXX | 0-9 a-f | 10 | ||
| TALKTALK-XXXXXX | 0-9 A-Z (remove 0125 ILOSZ) | 8 | ||
| TDC-#### | 0-9 a-f | 9 | ||
| Tech_XXXXXXXX | A-Z | 8 | ||
| Technicolor-Router | 0-9 A-F | 10 | ||
| TelstraXXXXXX | 0-9 A-F | 10 | ||
| TELUSXXXX | 0-9 a-f | 10 | ||
| TEW-###DRU | ### + last 8 of serial | 11 | ||
| Thomson | 0-9 A-F | 10 | ||
| ThomsonXXXXXX | 0-9 a-f | 10 | ||
| TIM_PN51T_XXXX | 0-9 | 8 | WPS pin is 12345670 WPS can't be disabled | |
| TNCAP-XXXX | 0-9 A-F | 10 | ||
| TNCAPXXXXXX | 0-9 | 10 | ||
| TP-LINK_#### | 0-9 | 8 | ||
| TP-LINK_###### | 0-9 A-F | 8 | ||
| TRENDnetXXX-###XXX | ### of SSID + 8 digits (0-9) | 11 | ||
| TRKASHI-###### | ?d?d###### | 8 | ||
| UNITE-XXXX | 0-9 | 8 | ||
| UPCXXXXXXX (X=0-9) | A-Z | 8 | ||
| UPCXXXXXXX (X=Hex) | 0-9 A-Z a-z | 12 | ||
| Verizon MIFIXXXX XXXX | 0-9 | 11 | ||
| VIRGINXXX | 0-9 A-F | 8 | Canada | |
| Virgin Media | a-z (remove io) | 8 | ||
| virginmediaXXXXXX | a-z (remove io) | 8 | ||
| virginmediaXXXXXXX | a-z | 8 | ||
| VirginMobile MiFiXXXX XXX | 0-9 | 11 | ||
| VMXXXXXXX | 0-9 a-z A-Z | 12 | ||
| VMXXXXXXX-2G | a-z (remove io) | 8 | ||
| VMXXXXXXX-5G | a-z (remove io) | 8 | ||
| Vodaphone_XXXXXXXX | 0-9 a-z | 15 | ||
| vodafone-XXXX (Ireland) | 0-9 A-Z | 14 | Ireland / Full A-Z not confirmed | |
| WebCube#### | 0-9 A-F | 8 | ||
| WLAN1-XXXXXX | 0-9 A-F | 10 | ||
| ZyXELXXXXXX | 0-9 A-F 0-9 A-Z | 10 13 | ||
Still to Process / Unconfirmed
| SSID | CHARACTER SET | LENGTH / FORMAT | NOTES | |
|---|---|---|---|---|
| SkyQ2 | 0-9 a-z A-Z | 12 | ||
| Telecom-XXXXXXXX | ||||
| TurkTelecom Txxxx | ||||
| TurkTelecom Zxxxx | ||||
| Zain- | ||||
| NOWTVXXXXX (hub2) | 0-9 a-z A-Z | 12 | Possibly same as SkyQ2 | |
| SUPERONLINE-WIFI_XXXX | 0-9 A-Z | 12 | ||
| SUPERONLINE_WIFI_XXXX | 0-9 a-f | 8 | ||
| JioFi2_XXXXXX (X=last 6 of MAC) | 0-9 a-z | 10 | ||
| MOVISTAR_XXXX | 0-9 a-z A-Z | 20 | i o ? | |
| VodafoneNet-XXXXXX | 0-9 A-Z? | 10 | Turkey (Alphanum) | |
| OriginBroadband#### | 0-9 a-f | 8 | Unconfirmed | |
| OriginBroadband##### | 0-9 a-f | 8 | 1 example seen | |
| TURKSAT-KABLONET-???? | 0-9 a-f | 8 | Confirm ???? | |
| ORANGE_XXXX | 0-9 A-Z | 8 | X=HEX? Country=Jordan | |
| ORANGE_XXXX - (possible) | ACDEFGHJKMNPQRTUXY3467 | 8 | X=HEX? Country=Jordan | |
Last edited:
