Account
Shelly Logo Squared

Setup & Wi-Fi Shelly troubleshooting

Locked out of a Shelly's web page

The web page asks for a password nobody knows, keeps refusing the right one, or jumps to https with a browser warning. What each means and how to get back in.

Checked

  • Gen4

Start here

What are you seeing?

Pick the closest match and we'll point you to the fix most likely to sort it.

Go to the fix

Why it happens

A Shelly's web page is open by default. Turning on Authentication adds one password, with the username admin, and Shelly has no way to recover it.

Firmware 2.0 added two more things that can look like a lockout: a wait after repeated wrong passwords, and HTTPS on devices that shipped with it.

Before you start

These checks are done in a browser or the Shelly app. A factory reset with the device's button is only for a button you can reach without opening the wall plate. If it's behind one, ask a licensed electrician.

Quick checks first

Run these checks before moving on to the fixes.

Checklist 0 of 2 checked
Try the username admin

Shelly uses one user, and the username is always admin. Only the password is yours.

Try the app

If the device still works in the Shelly app, you can restart or reset it from there without the web page.

Fixes, most likely first

Work down the list and stop when it's fixed.

  1. The password is lost

    How to tell. A login box appears when you open the device's address, and nobody knows the password. Shelly documents no way to recover it.
    • Turn it off if you know it

      Sign in with admin and the password, go to Settings, then Authentication, untick Enable password protected device and click Save.

    • Otherwise, factory reset it

      In the app, Factory Reset deletes all its settings, including the password. Without the app, the factory reset guide covers the button; on the Shelly 1 Gen4 it's the round button on the back. You'll set it up again from the start.

  2. It's making you wait after wrong tries

    How to tell. The right password keeps failing. From firmware 2.0, Shelly adds a delay after more than 10 wrong tries in 10 minutes, up to 5 minutes between attempts.
    • Wait, or restart it

      Stop trying for a few minutes, or restart the device from the app or by switching its power off and on. Shelly resets the count on a restart.

    • Update anything holding an old password

      Home Assistant or another app still using an old password can use up the wrong tries on its own. Update it first.

    • Update to 2.0.1 or later

      Shelly fixed two sign-in bugs in firmware 2.0.1. Once you're in, go to Settings, then Firmware, and click Check for updates.

  3. The web page has moved to HTTPS

    How to tell. Opening the address takes you to https:// with a browser warning. Devices that came from the factory with firmware 2.0 or later redirect to HTTPS, using a certificate from Shelly's own authority.
    • Continue past the warning

      Your browser doesn't know Shelly's certificate authority, so it warns. Shelly says the connection is still encrypted. Continue to the page.

    • It can't be turned off

      On a device that shipped with firmware 2.0 or later, Shelly keeps enhanced security on permanently.

  4. Enhanced security was turned on

    How to tell. On a device updated from older firmware, someone turned on enhanced security and now wants it off. Shelly only lets it go back off with a factory reset.
    • Leave it on, or factory reset

      On an updated device it doesn't block the web page by itself. If you need it off, a factory reset is the only way.

  5. Home Assistant needs the password

    How to tell. Home Assistant asks for a password, or stopped updating after a password was set or changed on the device.
    • Enter the device's password

      Give Home Assistant the same password as the web page. The Home Assistant guide covers the rest of the setup, including Verify SSL.

  6. The setup hotspot has closed

    How to tell. You're trying 192.168.33.1 and nothing opens. Shelly closes the open setup hotspot a few minutes after the device joins your Wi-Fi.
    • Use its address on your network

      Find the device's address in the app or your router, and open that instead. If it never joined your Wi-Fi, switch it off and on to reopen setup for 15 minutes.

Frequently asked questions

Always admin. Shelly supports only one user.

No. Shelly leaves its basic device information, MQTT and the outbound WebSocket unprotected by it.

Shelly documents no recovery. A factory reset clears it, along with all other settings.

Still need a hand?

We answer most messages within one business day. If your question is about an existing order, have your order number ready. It speeds things up.

Contact us