And they will thank you for the convenience. Disclaimer: This post is for educational and defensive security purposes only. The author does not condone unauthorized access to any industrial control system. Always obtain written permission before testing credentials on any production HMI.
Some Delta HMIs ship with no password on the Admin account. In this state, any software (like DOPSoft) can upload the entire project, including PLC tags and alarm logic, without authentication. Why "111111"? The Engineering Trade-Off To understand the risk, you must first understand the engineer. Delta HMIs are designed for rapid deployment in brownfield environments. A system integrator commissioning 50 machines on a tight deadline does not want to manage a complex Active Directory or certificate authority. They want a password that is fast to type, easy to remember, and uniform across a fleet. delta hmi default password
| Delta HMI Series | Default Username | Default Password | Protocol/Interface | | :--- | :--- | :--- | :--- | | (Standard) | (Blank) | 111111 | Ethernet / USB / RS-232 | | DOP-B Series (Older firmware) | (Blank) | 999999 | Serial / DOPSoft | | DOP-W Series | (Blank) | 111111 | All interfaces | | DOP-100 Series (Newer) | Admin | 111111 | Ethernet / USB | | DOPSoft (PC Software) | N/A | 111111 | Project file protection | | System Recovery Mode | delta | delta | Bootloader / UART | And they will thank you for the convenience
Treat every 111111 as a red flag. Audit your HMIs this week. Check the upload password. Review your network rules. Because the next person to type 111111 into your HMI might not be a tired engineer on a deadline. It might be an adversary with a Shodan search and a copy of DOPSoft. Why "111111"