ASIC Miner Factory Defaults & Recovery Reference

Models: S9, S9i, S9j, T9+  ·  Xilinx Zynq Z-7010 / Z-7007 (C5-class control board)

Default network

DHCP — no static default IP

Find the IP

Press the IP Report button on the control board (hold ~5 s, not a tap) and the miner broadcasts its IP to Bitmain's IP Reporter tool on the same subnet; or read your router's DHCP lease table / run nmap -sn.

Web dashboard login

root / root (stock web dashboard; HTTP digest realm "antMiner Configuration")

SSH login

root / admin (Bitmain SD-installer passwd.txt default) — NOT root/root; the famous root/root is the web-UI digest, not the SSH password

Reset (config wipe)

Reset button, config-wipe only: hard power-cycle, wait exactly 2 minutes (the button handler is only live 2–10 min after a cold boot), then hold Reset ~5 s. The firmware image stays; /config is cleared.

Firmware recovery

MicroSD (16 GB or smaller, FAT32, MBR, single partition) with Bitmain's SD-recovery bundle → reflashes NAND. The S9 family preserves MAC + config via a UBI "config" volume.

Watch out

The bundle's *.jffs2 files are actually UBI images (UBI# magic), not JFFS2. S9/S9i/S9j share one Zynq artifact set — only the rootfs differs per model.

Full step-by-step recovery guide →

Models: L3+, D3, A3  ·  TI AM335x (BeagleBone-class control board)

Default network

DHCP — no static default IP

Find the IP

Router DHCP lease table, or Bitmain's IP Reporter tool. (Not all L-series units carry a dedicated IP-report button.)

Web dashboard login

root / root (HTTP digest realm "antMiner Configuration")

SSH login

root / admin (SD-installer passwd.txt default)

Reset (config wipe)

Reset button (same cold-boot window as the S9 family) — config wipe.

Firmware recovery

MicroSD SD-recovery bundle → reflashes NAND (the AM335x ROM probes four NAND offsets, so MLO is written to four partitions).

Watch out

⚠ On the L3+, recovery WIPES all user config (/config is cleared with rm -rf) — back up your pool settings first. Runs cgminer-ltc (Scrypt), not bmminer. A partial SD flash (missing an MLO copy) bricks the loader.

Full step-by-step recovery guide →

Models: S17, S17+, S17 Pro, T17, T17+  ·  Xilinx Zynq (Zynq-7000 class control board)

Default network

DHCP — no static default IP

Find the IP

IP Report button (hold ~5 s) → IP Reporter tool; or router DHCP lease.

Web dashboard login

root / root (stock)

SSH login

root / admin on the sibling S9-family Zynq boards; the widely-cited root / root is the web-dashboard digest, not the SSH password. Confirm per unit — custom firmware (VNish/Braiins/LuxOS) sets its own.

Reset (config wipe)

Reset button — cold-boot, wait 2 min, hold ~5 s (valid 2–10 min window). Config wipe.

Firmware recovery

MicroSD (≤16 GB, FAT32/MBR) with the image for your EXACT control-board silkscreen revision → reflashes NAND. The S17/T17 family shares boot artifacts (one Zynq kernel across all four).

Watch out

Use the image for your exact silkscreen revision — a wrong-revision image bricks the board.

Full step-by-step recovery guide →

Models: S19, S19 Pro, S19j, S19a, S19 Pro+ Hyd  ·  NAND control board (silkscreen e.g. BHB42xxx / BHB56xxx / BHB68xxx)

Default network

DHCP — no static default IP

Find the IP

IP Report button (hold ~5 s) → IP Reporter tool; router DHCP lease. DCENT_OS additionally advertises the miner over mDNS.

Web dashboard login

root / root (stock) — newer boards ship a per-unit sticker password instead

SSH login

root / root (legacy) or admin / admin (newer firmware), or the per-unit sticker password

Reset (config wipe)

Reset button — hard power-cycle, wait 2 min, hold Reset ~5 s (valid 2–10 min window after a cold boot). Config wipe.

Firmware recovery

MicroSD (≤16 GB, FAT32, MBR) with the EXACT-revision Bitmain image → reflashes the control board. Wrong-revision flashing is the number-one operator-error brick at the bench.

Watch out

Match the firmware to the silkscreen revision (e.g. BHB68001 vs BHB68601) — an image from a different revision of the SAME model bricks the board.

Full step-by-step recovery guide →

Models: S19 XP, S19 XP Hyd, S19k Pro, S19j Pro (Cvitek batches), S21, S21 Pro, T21, L7  ·  Cvitek CV1835-class SoC with eMMC storage

Default network

DHCP — no static default IP

Find the IP

IP Report button / IP Reporter tool; router DHCP lease.

Web dashboard login

root / root, or the per-unit sticker password

SSH login

miner / miner, with the root account DISABLED (root shell = /bin/false)

Reset (config wipe)

Reset button (cold-boot window). ⚠ A wrong reset on an eMMC-only board can turn a bent config into a bricked control board.

Firmware recovery

SD-card recovery is often UNAVAILABLE on these eMMC-only boards → recover over UART / U-Boot TFTP with the exact-revision image. Highest brick risk of any generation; if U-Boot won't respond, it needs bench work.

Watch out

eMMC-only means there is no simple SD-reflash safety net. S19j Pro shipped on more than one control board across batches — if miner/miner fails, try the S19-series NAND row's root/root.

Full step-by-step recovery guide →

Models: M20S, M21S, M30S, M30S+, M31S, M50, M53, M60 (and siblings)  ·  MicroBT control board (Xilinx Zynq-class), H3/H6 generation

Default network

DHCP — the assigned IPv4 is shown on the front LED/LCD (0.0.0.0 or 169.254.x.x on the display means DHCP did not answer)

Find the IP

Hold the IPFOUND button ~2 s and the miner announces its IP; or run MicroBT's IPReporter / IPFOUND tool; or check the router's DHCP leases for a fresh MAC prefix A4:C1:38, D0:71:C4 or 7C:21:0D.

Web dashboard login

admin / admin (limited web admin) and super / super (full admin) — change the super password immediately

SSH login

Managed via the web dashboard / btminer API; SSH login varies by firmware — use the dashboard.

Reset (config wipe)

Hold RESET for 5–10 s for a full factory reset (returns to admin/admin + super/super, DHCP).

Firmware recovery

MicroSD rescue image; UART serial recovery on control-board corruption (e.g. M30S). For a direct link, static-assign your laptop to 192.168.1.99/24 and connect straight to the miner.

Watch out

After a factory reset the super password is back to its default — reset it before the miner is reachable on an untrusted network.

Full step-by-step recovery guide →

Models: KD-BOX, Mini-DOGE, HS-BOX, ST-BOX, CK-BOX, KA-BOX, KD5, KD6, LT5, LT6, CK6, KD-MAX  ·  Goldshell control board — BOX models have a user microSD slot; KD/LT/CK/KD-MAX use eMMC

Default network

DHCP — no static default IP

Find the IP

Open find.goldshell.com on a wired laptop on the same LAN (WiFi off, incognito, no extensions); or the router's DHCP client list — Goldshell MAC prefix 18:2A:7B (current), 5C:CF:7F or 24:C9:A1 (early BOX OEM).

Web dashboard login

Legacy firmware (most BOX-series and stock-era KD5/KD6/LT5/LT6/CK6): admin / 123456789. Modern firmware (BOX-II, Mini-DOGE III+, late KD6/LT6 after ~mid-2023): the Goldshell Zone account email + password (cloud-bound via zone.goldshell.com; an unbound unit shows a QR-binding screen instead of a password prompt).

SSH login

Not the documented field path — recover via the web dashboard or the Zone binding, not SSH.

Reset (config wipe)

Hold the RST button 5–10 s (wait 90 s after AC power before starting). Or in the web UI: Configuration -> System -> Factory Reset (legacy) / Device Management -> Unbind & Reset (Zone firmware).

Firmware recovery

SD-card reflash is BOX-series ONLY (those have a user microSD slot) — balenaEtcher + the burn-*.img recovery image (request from hello@goldshell.com). KD5/KD6/LT5/LT6/CK6/KD-MAX are eMMC and are RST-button-only in the field. Firmware upgrades must run over Ethernet, never WiFi.

Watch out

Change the published 123456789 default immediately. A used, Zone-bound BOX still tied to the prior owner's account is cleared by an SD-image reflash. Non-BOX (eMMC) models have no SD safety net.

Full step-by-step recovery guide →

Models: KS0, KS0 Pro, KS0 Ultra, KS1, KS2, KS3, KS3L, KS3M, KS5, KS5L, KS5M  ·  IceRiver control board (eMMC); front-panel LEDs D1–D4

Default network

DHCP; factory fallback 192.168.1.1 when DHCP does not answer (static-assign your laptop to 192.168.1.0/24). Default hostname ICERIVER-* or KS3M-*.

Find the IP

IceRiver's Detect IP tool from iceriver.io; or the router DHCP lease table.

Web dashboard login

A model-specific default printed on the chassis sticker / in the user manual — current defaults are listed at iceriver.io/faq/. IceRiver uses per-model defaults, not one universal password.

SSH login

Not the documented field path — recover via the web UI or SD recovery.

Reset (config wipe)

Hold the reset button a FULL 20 seconds until the red status LED flashes, then wait 5 minutes untouched (the bootloader copies the factory partition over the active one — interrupting bricks the eMMC). Some KS5L/KS5M revisions require holding reset WHILE powering on.

Firmware recovery

SD-card recovery — balenaEtcher + the .img from iceriver.io/firmware-download/; insert the SD, power on holding reset ~5 s (up to 30 s on some revisions), wait 8 minutes untouched. UART + eMMC reflash for deeper bricks.

Watch out

The 20-second hold with red-LED confirmation and the 5-minute do-not-touch rule are mandatory — an interrupted reset bricks the unit. Third-party firmware (xyys / tswift / iceriver-oc) changes reset behaviour.

Full step-by-step recovery guide →

Models: AvalonMiner 1066, 1066 Pro, 1166 Pro, 1246, 1366, 1466, 1566, Nano 3 / 3S  ·  AvalonMiner control board (cgminer-based)

Default network

DHCP; configuration-mode static fallback 192.168.168.168 (subnet 255.255.255.0) — browse http://192.168.168.168/

Find the IP

The AvalonMiner control panel / Avalon app; the router DHCP lease; or configuration mode at 192.168.168.168.

Web dashboard login

root / root

SSH login

Managed via the web UI / cgminer API.

Reset (config wipe)

Press and hold the FUNC key 5–10 s (before the indicator light turns red) while powered on — clears network, pool and password configuration.

Firmware recovery

Firmware upgrade via the web UI; SD-card recovery on models whose control board has an SD slot (per the Canaan model manual).

Watch out

root/root is widely published — change it immediately. Confirm the exact model manual: defaults and the reset key vary slightly across AvalonMiner generations.

Full step-by-step recovery guide →

Models: D1, D1 Lite, D1 Mini, D1 Mini Pre, D1 Hydro  ·  Volcminer D1 controller (Antminer-class architecture)

Default network

DHCP — no static default IP

Find the IP

Router DHCP / connected-devices list; or VolcMiner's IP Reporter tool (volcminer.com/techsupport) — run it, then hold the IP Report button on the controller until the red LED lights.

Web dashboard login

root / ltc@dog (the @ is a literal @ character)

SSH login

SSH may be locked or use different credentials — use the web dashboard.

Reset (config wipe)

Web UI: Configuration -> System -> Factory Reset (returns to ltc@dog); or a firmware upgrade with Keep Settings UNCHECKED.

Firmware recovery

SD-card reflash — FAT / FAT32 only (32 GB or smaller; exFAT is NOT supported), extract the official recovery image to the SD root, insert into the controller daughter-board, power on: both LEDs on -> both off after ~10 s (refresh begins) -> wait 60–180 s -> both LEDs on = done. UART (3.3 V) is the last resort.

Watch out

exFAT is not supported (FAT32 only). Wrong-variant firmware (D1 vs Lite vs Mini vs Hydro) bricks the controller. Discharge the 3900 W PSU for 5 minutes before opening the chassis.

Full step-by-step recovery guide →