Goldshell – Login Fail / Default Password Reset

Confirm the IP via find.goldshell.com or your router's DHCP client list. Open https://find.goldshell.com in an incognito browser on a wired laptop sharing the same LAN as the miner — WiFi off, no extensions. If the tool returns nothing, log into your router admin UI and search the DHCP client list for MAC prefix 18:2A:7B (current Goldshell OUI), 5C:CF:7F, or 24:C9:A1 (early BOX OEM prefixes). Note the current IP. Browse to http://<miner-ip>/. Loaded login page = continue. No login page = jump to the find.goldshell.com discovery page before doing anything else — IP-discovery problems masquerade as login problems all day long.

Try the documented factory defaults for your firmware era. Legacy local-account firmware (most BOX-series, KD5/KD6/LT5/LT6/CK6 on stock-era firmware): username admin, password 123456789 — lowercase username, all-numeric nine-digit password, no quotes, no spaces. Modern firmware (BOX-II, Mini-DOGE III+, late KD6 / LT6 batches shipping after roughly mid-2023): sign in with the Goldshell Zone email and password you used during first-boot device binding. If you've never bound this miner to a Zone account, the modern firmware will show a QR-code binding screen instead of a password prompt — scan with the Goldshell Zone app or visit zone.goldshell.com to register a new account and bind.

Change the password right now, before you do anything else. Once logged in on legacy firmware, navigate to Configuration → Account → Change Password (label varies slightly per firmware version and model). Enter the current password (123456789), then a new strong one — minimum 16 characters, mix of uppercase, lowercase, numbers, and symbols. Save. Reboot if the firmware prompts. Do this *before* you point the miner at your pool credentials — anything you configure on a default-credential miner is exposed until you rotate. On Zone-bound firmware, change the Zone account password through zone.goldshell.com rather than on the miner itself.

Save your password to a manager *outside* the miner. Bitwarden, 1Password, KeePassXC — your pick. Tag the entry with the miner's MAC address (printed on the chassis label, also visible in your router's DHCP table) so a hostname or IP rotation never loses you the credential. Sticky notes on the chassis are not a password manager. For Zone-bound miners, save both the Zone email login and a recovery codeword for the email account — losing the email cuts off every miner bound to it, not just one.

Web-UI factory reset (you're logged in, want to wipe). On legacy firmware, navigate to Configuration → System → Factory Reset (label varies). Confirm. Miner reboots, all settings wipe, password returns to admin / 123456789. Use this when you want to start over but the miner is otherwise healthy. On Zone firmware, the equivalent is Configuration → Device Management → Unbind & Reset — wipes the Zone binding token, miner returns to first-boot QR-code state.

Locate the RST button on your specific Goldshell model. BOX-series (KD-BOX, Mini-DOGE, HS-BOX, ST-BOX, CK-BOX, KA-BOX) — small recessed pinhole on the side or rear of the chassis, requires a paperclip. KD5 / KD6 / LT5 / LT6 / CK6 — small recessed button on the rear panel near the Ethernet jack, requires a fingernail or stylus. KD-MAX — same as KD6 layout. The Goldshell Help Center reset article has photos for each model. Using the wrong-model procedure on the wrong miner is the #1 reason people complain 'the reset button doesn't work.'

Press and *hold* RST for 5-10 seconds — release timing matters. Miner powered on and booted (wait 90 seconds after AC connection before starting the reset). Press and hold the RST button. Watch the LEDs: BOX-series — power LED and status LED both cycle (green → red → off → on) when reset is registered. KD5 / KD6 / LT5 / LT6 / CK6 / KD-MAX — status LED transitions to amber/orange and the fans ramp briefly. Release when you see the LED change. Holding >15 seconds on some firmware triggers a different mode entirely.

Wait for reboot and re-discover the miner. After RST release, the miner reboots automatically. Wait a full 120 seconds for the boot cycle to complete and DHCP to negotiate a fresh lease. Then re-run find.goldshell.com (or your router DHCP scan) to find the post-reset IP — it may have changed because the miner pulled a fresh lease. Browse to the new IP, log in with the legacy defaults (admin / 123456789) or complete the Zone QR-binding flow on modern firmware.

Set a static IP or DHCP reservation immediately. Once logged in, set a static IP from the miner's web UI (Configuration → Network → Static IP), or log into your router and assign a DHCP reservation to the miner's MAC. This means the miner's address never wanders again across reboots, ISP renewals, or router restarts — the next 'I can't log in' session is never an IP-discovery session. Document the IP in your password manager next to the credentials.

Re-flash to the latest stable firmware over Ethernet (never WiFi). Goldshell's firmware upgrade article is explicit: firmware upgrades must run over Ethernet, never WiFi. WiFi mid-upgrade is the most common Goldshell brick path. Download the official firmware bundle for your exact model from Goldshell's upgrade portal at goldshell.com/upgrade-firmware/. Push it via the web UI's firmware-upgrade form. Wait the documented 5-15 minutes (varies by model) without touching anything. New firmware ships with security patches; running stock-from-factory firmware on a miner shipped two years ago means missing 18+ months of fixes.

SD-card reflash is BOX-series only. KD-BOX, Mini-DOGE, HS-BOX, ST-BOX, CK-BOX, KA-BOX, AL-BOX II, KD-BOX II — all have a user-accessible micro-SD card slot on the control board. KD5 / KD6 / LT5 / LT6 / CK6 / KD-MAX use eMMC and have no user-accessible SD card — those are RST-button-only in the field. If you're on a non-BOX model and RST failed, skip to Tier 4. The community-canonical guide for BOX-series SD-card reflash is the James Chambers Goldshell BOX recovery article — owns this category in search and has been verified by hundreds of operators.

Download the official Goldshell BOX recovery image for your exact model. The recovery .img is distributed via Goldshell's support portal and sometimes mirrored on the goldshellminer GitHub firmware repo. Verify the model name in the filename matches your miner exactly (KD-BOX vs KD-BOX Pro vs KD-BOX II are different images). Wrong-model image on the wrong board can brick the controller. Cross-reference against the chassis label.

Reflash the SD card with balenaEtcher or Raspberry Pi Imager. Power off the miner. Remove the micro-SD card from the BOX control board (Phillips #1 to open the chassis on most BOX models — two screws on the bottom plate). Insert into a USB SD reader on your laptop. Open balenaEtcher, select the Goldshell recovery .img, select the SD card as the target, click Flash. Wait for write + verify (5-15 minutes depending on image size and SD card speed). Eject. Reinsert into the BOX. Power the miner. After a full 3-5 minute boot cycle, the miner is back to factory defaults — login with admin / 123456789 on legacy images or complete the Zone QR-binding flow on modern images.

If the SD card itself is suspect, replace it. Goldshell ships some BOX units with low-grade SanDisk / generic micro-SD cards that wear out under continuous miner I/O. If reflash fails or boots corrupt, the SD card is end-of-life. Replace with an industrial-grade A2-rated micro-SD card (16 GB is plenty — Goldshell BOX images are well under 8 GB). Brands that survive miner workloads: Sandisk Industrial, Samsung Pro Endurance, Kingston Industrial. Cheap consumer SD cards die in 6-18 months of continuous Goldshell use.

For Zone-bound modern firmware: SD reflash also clears Zone binding. A clean SD-image reflash on BOX-II / late KD-BOX Pro / late Mini-DOGE III+ wipes the Zone token from the miner's flash. On first reboot you'll see the QR-code binding screen, ready to bind to your own Goldshell Zone account. This is the *only* field-recoverable path for a used BOX miner that's still bound to a prior owner's Zone account. Document this on your purchase: SD reflash before deploy = clean ownership.

Stop DIY when the RST button fails on a non-SD-card model and Zone binding can't be cleared. KD5 / KD6 / LT5 / LT6 / CK6 / KD-MAX with corrupt Zone binding, no working credentials, and no RST response means the eMMC firmware is in a state field tools can't recover from. D-Central's bench can re-flash the eMMC directly via a J-Link / USB-DM programmer on the control board's debug header — bench-only work. Typical out-of-pocket CAD $120 – $220 including testing and burn-in. Book ASIC Repair with a note that RST button doesn't change the LEDs and Web UI rejects every credential.

Stop DIY when SD-card reflash on BOX-series fails repeatedly. Symptoms: SD reflash completes cleanly on the laptop but the miner won't boot to a login page after reinsertion, or boot loops on every reflash attempt. This usually means the BOX control board's eMMC, NAND, or boot ROM is faulty — beyond field-replaceable. D-Central keeps parts-graded BOX control boards for swap-out; typical CAD $140 – $240 per board including verification. Ship the entire miner including PSU — a marginal PSU brownout during boot can present as a dead control board.

Ship the miner properly. Anti-static bag for any removed boards. Double-box the chassis with 5 cm+ of foam padding on every side. Include the PSU, the SD card if you've been working with it, a printed note with: observed symptoms, miner model and serial number, MAC address, last working firmware version (if known), Zone account email (if applicable — D-Central won't access it, but knowing the binding state speeds bench triage), and contact information. The MAC and Zone-binding state alone save D-Central 30-60 minutes of re-diagnosis at the bench. Canada-wide standard shipping; US / international welcomed.