List of menus with sensitive parameters
Below you can find a list of menus where sensitive (shown only when show-sensitive parameter is used or alternatively hidden when "Hide password" is enabled in WinBox settings) parameters can be configured. For more detailed information, please refer to the corresponding menu documentation pages.
| Menu | Parameter names | Page link |
|---|---|---|
/container |
password | Container#Containerconfiguration |
/ip/hotspot |
mac-auth-password, password, otp-secret | HotSpot - Captive portal#HotSpotUsers |
/iot |
password, key | password - MQTT#Brokers key - Lora#Servers |
/interface/gre /interface/gre6 |
ipsec-secret | GRE#Properties |
/interface/ipip /interface/ipipv6 |
ipsec-secret | IPIP#Properties |
/interface/eoip /interface/eoipv6 |
ipsec-secret | EoIP#PropertyDescription |
/interface/6to4 |
ipsec-secret | 6to4#6to4-PropertyDescription |
/interface/ppp-client |
password, pin | Work in Progress PPP |
/interface/sstp-client |
password | SSTP#Properties |
/interface/l2tp-server /interface/l2tp-client /interface/l2tp-ether |
ipsec-secret, password | ipsec-secret, password - L2TP#L2TPClient ipsec-secret - L2TP#L2TPServer ipsec-secret - L2TP#L2TPEther |
/interface/ovpn-client |
password | OpenVPN#OVPNClient |
/interface/pptp-client |
password | PPTP#PPTPClient |
/interface/pppoe-client |
password | PPPoE#PPPoEClient |
/ppp/secret |
password | PPP AAA#UserDatabase |
/ppp/l2tp-secret |
secret | Work in Progress |
/ip/ssh/export-host-key /ip/ssh/import-host-key |
passphrase | SSH#SSHServer |
/ip/ipsec |
auth-key, enc-key, ppk-secret, secret, password, passphrase, key | auth-key, enc-key - IPsec InstalledSA secret, password - IPsec Identity ppk-secret - Work in Progress IPsec Peer key, passphrase - Work in Progress IPsec Keys |
/system/ssh-exec |
password | SSH#SSHexec |
/user |
password, passphrase | User |
/disk |
nvme-tcp-server-password, nvme-tcp-password, smb-server-password, smb-password, self-encryption-password, encryption-key, sshfs-password | nvme-tcp-server-password, nvme-tcp-password - NVMe over TCP sshfs-password - Work in Progress smb-server-password, smb-password - SMB self-encryption-password, encryption-key - Self-Encrypting Drives |
/interface/vrrp |
password | VRRP#Parameters |
/interface/dot1x |
password | Dot1X#Client |
/interface/macsec |
cak | MACsec#PropertyReference |
/interface/wireguard |
private-key, preshared-key, *show-client-config | WireGuard |
/interface/lte |
pin, password | LTE/5G#LTEClient |
/socks/users |
password | SOCKS |
/ip/cloud |
vpn-private-key, vpn-peer-private-key, private-key | Back To Home#Propertyreference |
/ip/smb |
password | SMB#Usersetup |
/password |
old-password, new-password, confirm-new-password | Password change command; no dedicated documentation page available. |
/radius |
secret | RADIUS#RADIUSClient |
/routing |
password, tcp-md5-key, auth-key, key | password,key - /routing/rip tcp-md5-key - /routing/bgp/connection auth-key - /routing/ospf |
/snmp/community |
authentication-password, encryption-password | SNMP#CommunityProperties |
/system/backup |
password | Backup |
/system/ntp/key |
key-val | Work in Progress NTP |
/system/swos/password |
new-password, confirm-new-password | SwOS password change command; no dedicated documentation page available. |
/system/package/local-update |
password | Packages#LocalUpdate |
/system/license |
password | RouterOS license keys#CHRLicenseLevels |
/tool/romon |
secrets | RoMON#Configuration |
/tool/sms |
sim-pin, secret | SMS#Receiving |
/tool/email |
password | |
/tr069-client |
connection-request-password, password | TR-069#ConfigurationSettings |
/user-manager |
web-private-password, paypal-password, shared-secret, password, otp-secret | shared-secret - User Manager#Routers paypal-password, web-private-password - User Manager#Advanced password, otp-secret - User Manager#Users |
/interface/wifi |
passphrase, eap-password | WiFi#SecurityProperties |
/caps-man |
private-passphrase, passphrase | private-passphrase - CAPsMAN#CAPsMANAccess-list passphrase - CAPsMAN#CAPsMANconfiguration |
/interface/wireless |
static-key-0, static-key-1, static-key-2, static-key-3, static-sta-private-key, management-protection-key, nv2-preshared-key, private-key, private-pre-shared-key, wpa-pre-shared-key, wpa2-pre-shared-key, mschapv2-password | static-key-0, static-key-1, static-key-2, static-key-3, static-sta-private-key - Wireless Interface#WEPproperties management-protection-key, private-key, private-pre-shared-key - Wireless Interface#Properties wpa-pre-shared-key, wpa2-pre-shared-key - Wireless Interface#WPAproperties mschapv2-password - Wireless Interface#WPAEAPproperties nv2-preshared-key - Wireless Interface#Generalinterfaceproperties |
/interface/w60g |
password | W60G#Generalinterfaceproperties |
/zerotier |
identity | ZeroTier#Parameters |
/certificate |
export-passphrase, passphrase, challenge-password, pin, key-passphrase, challenge-passphrase | pin - used for card-reinstall and card-verify commands, no dedicated documentation page available. export-passphrase - Certificates#ExportCertificate passphrase - Certificates#ImportCertificate challenge-password, key-passphrase, challenge-passphrase - Work in progress |