Official websites use .gov
A
.gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A
lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
But behind every sleek touchscreen and every intuitive SCADA interface lies a silent, often overlooked Achilles' heel: the default password.
If you are an automation engineer, plant manager, or OT (Operational Technology) security professional, you’ve likely heard the numbers: 111111 , 999999 , or the dreaded blank password. This post is not just a list of credentials. It is an exploration of why these defaults exist, the specific risk model for Delta HMIs, and, most importantly, how to move from "out-of-the-box convenience" to "production-hardened security." Before we dive into the why and so what , here is the technical reference for current and legacy Delta HMI systems. Note: These are for administrative access, not runtime operation. delta hmi default password
Treat every 111111 as a red flag. Audit your HMIs this week. Check the upload password. Review your network rules. Because the next person to type 111111 into your HMI might not be a tired engineer on a deadline. It might be an adversary with a Shodan search and a copy of DOPSoft. But behind every sleek touchscreen and every intuitive
| Delta HMI Series | Default Username | Default Password | Protocol/Interface | | :--- | :--- | :--- | :--- | | (Standard) | (Blank) | 111111 | Ethernet / USB / RS-232 | | DOP-B Series (Older firmware) | (Blank) | 999999 | Serial / DOPSoft | | DOP-W Series | (Blank) | 111111 | All interfaces | | DOP-100 Series (Newer) | Admin | 111111 | Ethernet / USB | | DOPSoft (PC Software) | N/A | 111111 | Project file protection | | System Recovery Mode | delta | delta | Bootloader / UART | It is an exploration of why these defaults
And they will thank you for the convenience. Disclaimer: This post is for educational and defensive security purposes only. The author does not condone unauthorized access to any industrial control system. Always obtain written permission before testing credentials on any production HMI.
Some Delta HMIs ship with no password on the Admin account. In this state, any software (like DOPSoft) can upload the entire project, including PLC tags and alarm logic, without authentication. Why "111111"? The Engineering Trade-Off To understand the risk, you must first understand the engineer. Delta HMIs are designed for rapid deployment in brownfield environments. A system integrator commissioning 50 machines on a tight deadline does not want to manage a complex Active Directory or certificate authority. They want a password that is fast to type, easy to remember, and uniform across a fleet.
