Victron MPPT default Bluetooth password hack

[barryd]

Bizarre one on FB this morning. Someone is claiming their Victron MPPT controller has been hacked on a French Aire and the name of the system and settings changed so they can no longer get into it.

I suspect its been a mistake. I think the default password used to be 00000 and I wonder how many there are out there where the owners have not changed it. My recent one came with a sticker and unique Bluetooth password which is now stuck on the wall next to the controller. I wonder if someone parked next to them has accidently logged on thinking it was theirs and changed it all. Seems a bit far fetched for a malicious hack but the reason for posting it is in case anyone has left theirs on the default. Seems an unlikely thing to happen but clearly it can.

 

[jeffmossy]

A couple of our members had their settings changed when they was on a campsite in Silves recently

 

[Tim120]

My Victron MPPT password was changed by someone soon after I had it installed, made no difference to the working of it so I haven't bothered changing it to something I know, apparently easy to do, I think you need the serial number from the back of the unit.

At Silves we discovered our battery BMS settings had been changed.

 

[Fisherman]

Barry you can regain control by using the PUK code on the device itself, if you can’t find the PUK code you can contact Victron and they can unlock the device for you.


Yes, you can reset a forgotten Victron code and regain access to your device. This typically involves using the Personal Unlocking Key (PUK) found on the device itself, allowing you to reset the code to its default setting. If you don't have the PUK, you can contact Victron support or your dealer for assistance.

 

[barryd]

Barry you can regain control by using the PUK code on the device itself, if you can’t find the PUK code you can contact Victron and they can unlock the device for you.


Yes, you can reset a forgotten Victron code and regain access to your device. This typically involves using the Personal Unlocking Key (PUK) found on the device itself, allowing you to reset the code to its default setting. If you don't have the PUK, you can contact Victron support or your dealer for assistance.

It wasn't me Bill, just someone on Facebook. I posted it in case others might have the same issue and it seems its more common than I thought. As said the bluetooth code on mine was already a unique six digit number so should be ok.

 

[Admin]

All new Victron equipment has a random PIN code rather than a default.

 

[trevskoda]

Serves you lot for buying fancy cr-p just to impress the likes of me.

 

[mistericeman]

Yup the cerbo gx 2 I've just bought to replace a raspberry pi4 running venus
Came with it's own 'unique ' code rather than the earlier units 4/6 digit generic code .

 

[Nabsim]

How am I supposed to remember 000000?

 

[TJBi]

On a French aire recently, I discovered a third Victron device showing up in my app; not mine, so presumably someone who had not changed from the default. I had quite a struggle getting password changes to stick after my system was installed, but eventually succeeded. Good that Victron have gone for something more secure on more recent supply.

 

[Canalsman]

On a French aire recently, I discovered a third Victron device showing up in my app; not mine, so presumably someone who had not changed from the default. I had quite a struggle getting password changes to stick after my system was installed, but eventually succeeded. Good that Victron have gone for something more secure on more recent supply.

The Victron app will always show nearby devices (including your own of course). It doesn't discriminate and could not do so anyway. How else do you discover a new Victron device you've added?

Access to all Victron devices requires PIN input which is why the old default value MUST be changed.

 

[Pudsey Bear]

Sounds a bit omnibus to.me, why do that anyway.

 

[barryd]

Sounds a bit omnibus to.me, why do that anyway.

My guess its been an accident Kev. Not malicious.

 

[trevskoda]

More nonsence to go wrong, im staying with simple things that work for me.

 

[Fisherman]

More nonsence to go wrong, im staying with simple things that work for me.View attachment 142676

Victron equipment comes with a five year warranty for a reason Trev, it rarely goes wrong. And if it does their warranty support is well known. But anything which uses Bluetooth sends out indiscriminate signals to all other Bluetooth receivers such as tablets, mobile phones or laptops.
So you should never leave any Bluetooth equipment using default codes, you should always change them if possible. But Victron have now went to the lengths of giving each and every piece of equipment a unique code, something very few manufacturers have done. They recommend that you then change their given code to one you will remember.
The advantages of Bluetooth far out weigh any disadvantages in terms of additional control and increased options it offers. But if you don’t fancy using Bluetooth they make some of their equipment without it including their MPPTs.

 

[barryd]

Victron equipment comes with a five year warranty for a reason Trev, it rarely goes wrong. And if it does their warranty support is well known. But anything which uses Bluetooth sends out indiscriminate signals to all other Bluetooth receivers such as tablets, mobile phones or laptops.
So you should never leave any Bluetooth equipment using default codes, you should always change them if possible. But Victron have now went to the lengths of giving each and every piece of equipment a unique code, something very few manufacturers have done. They recommend that you then change their given code to one you will remember.
The advantages of Bluetooth far out way any disadvantages in terms of additional control and increased options it offers. But if you don’t fancy using Bluetooth they make some of their equipment without it including their MPPTs.

I must admit I didn't like the idea of an app and I used to love my old controller on the old van with its LED screen which gave you all the stats but the app is better to be fair. Until some French bloke resets it that is.

 

[Fisherman]

I must admit I didn't like the idea of an app and I used to love my old controller on the old van with its LED screen which gave you all the stats but the app is better to be fair. Until some French bloke resets it that is.

VWALLA Monsieur

Also Barry if you have other Victron equipment such as a B2B you can network them using Bluetooth. I find this enhances their performance when working together this way.

 

[trevskoda]

Victron equipment comes with a five year warranty for a reason Trev, it rarely goes wrong. And if it does their warranty support is well known. But anything which uses Bluetooth sends out indiscriminate signals to all other Bluetooth receivers such as tablets, mobile phones or laptops.
So you should never leave any Bluetooth equipment using default codes, you should always change them if possible. But Victron have now went to the lengths of giving each and every piece of equipment a unique code, something very few manufacturers have done. They recommend that you then change their given code to one you will remember.
The advantages of Bluetooth far out weigh any disadvantages in terms of additional control and increased options it offers. But if you don’t fancy using Bluetooth they make some of their equipment without it including their MPPTs.

My simple sys works 100% running a votronic mppt regulator amd i dont have or want a smart alt, never had a flat battery as yet all year round.