How do I get the telecom admin super password for the Telecom optical modem? You have to pass this before switching to a bridge; I spent two nights trying to figure it out before I understood

helped my father-in-law's house switch broadband and got stuck on me. The optical modem is a Tianyi gateway HG8145V5 provided by China Telecom. I want to change it to bridge to enable router dial-up. I went to 192.168.2.1 and searched the backend—the WAN connection field is gray and can't be changed. I found out that the useradmin on the sticker was logged in as a 'regular account.' To bridge for such a demanding operation, you have to log in with a super account starting with telecomadmin. And that password wasn't printed on the sticker at all. I spent two nights fiddling with this string of characters, figuring out the ins and outs of the telecom super admin password, and I'm writing this for anyone stuck at this step.

first clarify: What is the difference between useradmin and telecomadmin

Telecom custom optical modem backend accounts come in two tiers, and many beginners don't know and spend a long time tinkering with a regular account.

useradmin (Regular Management Account) : Printed on the sticker on the back of the optical modem, one code per device. The only things you can do are changing the WiFi name and password, checking the connected devices, and restarting the optical modem—all of these are 'surface settings.' This setup is enough for daily use. Combined with the Xiaoyi Manager app on your phone, you can switch to WiFi without even accessing the webpage backend.

telecomadmin (Super Administrator Account) : Manage the optical modem's "Underlying Settings" — WAN connection mode (bridge or routing), delete/create new WAN channels, disable ITMS remote management, and change voice call configuration. If you want to switch to bridge, multi-dial, or use the optical modem purely as a adapter block, this account is a must. It is not printed on stickers; it is written in by the operator during maintenance.

a detail to help you determine which level you're logged into: when you log in, check the browser address or the top of the page. For regular accounts, the menu is a bit shorter, and the 'Network' or 'WAN' section is basically read-only. Also, I wrote in the about how to find the correct entry point when 192.168.2.1 can't be opened. If you can't log in, check that article first—don't blindly try with the password.

the universal code circulating online, let me pour cold water on it first

search for "Telecom optical modem super password," and the top list of articles will list the most common ones:

telecomadmin / nE7jA%5m

this was the universal default password from many years ago, and now it's 99% unreliable. My father-in-law's HG8145V5 tried it, but it showed an incorrect password. The reason is simple: after this password became so widely circulated, telecom operators everywhere switched to a random one-code, one-machine password (usually a random character attached to the telecomadmin, such as telecomadminXXXXXX). After several mistakes, some models may lock your account, making locking even more troublesome.

there are also several types of "folk remedies" I don't recommend trying: one is to download and crack the tool, open telnet, and read configuration files. The tool must match the optical modem's firmware version; if the version is incorrect, it can fail at best or the machine will brick, and repairing the brick is a huge task; The other is to have the modem factory reset and then gamble on the default password—the reset will also erase the broadband authentication info, causing the modem to disconnect directly, the phone cannot be reached, and you have to wait for the installer to come and register again—it's basically a trap for yourself. These two remedies are detailed in the of the by China Unicom and ZTE Optical Modem. That article covers the Unicom machine approach. Telecom users can check it out, but copying it directly is at your own risk.

the main route: call number 10,000, that's what the script says

the legitimate source of the telecom super-administrator password: to ask the operator for . Call 10,000 to transfer to a human agent, or directly contact the installer who installed broadband at the time. The key lies in the script—if you say, "Give me a super password, I want to mess with the optical modem," customer service will politely refuse according to procedure, because if the super mode's permissions are compromised, they will come to clean it up.

my explanation was: "Technician, I installed my own router to do port forwarding and remote monitoring. I need to convert the optical modem to bridge. Please provide the super password, or help me remotely change the WAN mode." Providing a specific legitimate use greatly increases the approval rate. Two outcomes:

First, if you encounter a friendly Shuwei, they will directly give you the password (some regions will give it, some regions only provide remote operations without passwords, both are normal). Second, after customer service registers, arrange for a technician to call back or visit in person—it takes just a few minutes. Later, my father-in-law's house was remotely modified by a maintenance technician for the bridge, and he also gave the password. The whole process cost nothing.

reminder: write down your password and stick it on the optical modem or save it as a note on your phone. Restarting won't change this password, but the modem restores to the factory setup, it reverts to the carrier's initial , and you'll have to make another call.

really got super admin privileges, don't make mistakes in these steps of bridging

assuming you successfully obtain the Telecomadmin password, I have walked through the bridging process and listed the key points. Taking HG8145V5 as an example, other Tianyi gateway models have slightly different menu names but the same structure:

first step: start by digging into the background. In the backend, first find "Status" - "WAN Information" or "Network" - "WAN Connection," then copy down or screenshot your existing INTERNET connection parameters: VLAN ID (some regions have 41 or 43; this varies by region, so be sure to remember this), account password (broadband dial-up account, enter it on the router after bridging), and connection type. Mistaken VLAN, and after bridging, the router cannot dial in no matter what.

Step two: remove the old and build the new. Delete or switch the original INTERNET connection to bridging mode, create a new bridge WAN, fill in the newly copied VLAN, and bind the network port (usually LAN1). Be careful not to connect with "VOICE" or "OTHER"—those are IPTV and landline. If you change the TV, the phone will disconnect.

Step 3: Dial up the router. Connect the network cable from the optical modem (ONT) LAN1 to the router's WAN port. Set PPPoE to the router's internet connection mode and enter the copied broadband account and password. At this point, the optical modem is just a "photoelectric converter." Dial-up and DHCP are managed by the router, and the router can finally get the public IP for port mapping—my NAS can be accessed from outside, and the complete idea of remote access is written in NAS remote access .

the essential finishing touches and pitfalls after changing the change, I wrote more thoroughly in the on optical modem bridge modification (DNS reset after modification, IPTV requires single channel setup, etc.). I won't repeat it here; I recommend reading that article before proceeding.

you get pushed back after changing it? ITMS is the hand behind the scenes

this section is a unique pitfall for telecom users, and it's another reason I wanted to write this article. A friend changed the super admin password and bridge, but after using it for a week, the network suddenly dropped. When he checked the backend, he saw the WAN connection had switched back to routing mode, and he thought something was wrong with his home network.

not ghosts, it's ITMS. The telecom custom optical modem will regularly connect to the operator's remote management platform (ITMS). The platform stores your optical modem's "standard configuration." If the local configuration doesn't match the standard, it will push down and overwrite it in the middle of the night. The bridges you changed and the channels you deleted—all are restored for you. I mentioned this mechanism at the end of the article about 192.168.2.1 that couldn't be opened, and here I'll elaborate on how to handle it.

after obtaining the super admin account, go to the "Management" or "System" menu and find the TR-069 connection (sometimes called CWMP), delete or disable it, and ITMS will no longer be able to reach your optical modem. Before deleting, think carefully: delete TR-069, the carrier won't see your optical modem status online. In the future, when you request repairs, they won't be able to diagnose remotely, so you'll have to come to your door. My suggestion is to delete it after a week of observing the bridge and see if there are no issues, just for peace and quiet; If you mind remote after-sales support, keep it. If the configuration is pushed back, just redo it. Anyway, with the password, redoing it only takes two minutes.

Who needs to trouble super moderators, and who really doesn't

finish with a bucket of cold water. Super Password is not a must-have skill for advanced advancement, so let's take it seriously:

Sequence Summary: First, use the sticker and go to useradmin to enter the normal backend, confirm that the items you want to touch cannot be accessed with normal permissions; Then call 10000 and use the phrase 'installed your own router needs port forwarding' to ask for a password or ask someone to change it remotely; Get the password and copy the VLAN, then act; after changing it, monitor for a week to prevent ITMS from pushing back. Don't use cracking tools, don't randomly restore the factory—these two methods cost much more than making a phone call.