Open the Xfinity Admin Tool
http://10.0.0.1 Go
Username admin
Password password

admin / password is the Xfinity factory default and you are asked to change it. If it fails, the password was changed; the Xfinity app is the alternative.

Who uses 10.0.0.1

Xfinity gateways

Xfinity's rented gateways (marketed as the xFi Gateway, with model codes such as XB6, XB7 and XB8 on recent generations) combine a cable modem and a Wi-Fi router, and use 10.0.0.1 as their LAN address. Gateways from different manufacturers share the same Admin Tool design, so the steps below apply broadly, although menus vary slightly by model and firmware.

Other places you may see it

  • Comcast Business gateways — typically 10.1.10.1, not 10.0.0.1.
  • Business routers, firewalls and VPNs — the 10.x range is popular in offices because it is large.
  • Home routers set up manually — any router can be moved to 10.0.0.1 in its LAN settings.
  • Apple AirPort base stations (discontinued) — used 10.0.1.1, one digit different.

How to log in to 10.0.0.1

  1. Connect to the gateway over Wi-Fi or Ethernet. If you have your own router behind the Xfinity gateway, connect to the gateway directly.
  2. Type 10.0.0.1 in the browser address bar.
  3. Sign in with username admin and your Admin Tool password. The factory default is password.
  4. Change the default password when prompted, and store it somewhere safe.

If you only want to change the Wi-Fi name or password, see connected devices or set up port forwarding, the Xfinity app is usually quicker and on newer gateways it may be the only place those options appear. The Xfinity router login guide covers the app in detail.

What you can do in the Admin Tool

  • Bridge mode — turn the gateway into a plain modem so your own router or mesh system handles routing. This disables the gateway's Wi-Fi.
  • Local network (DHCP) settings — the gateway's LAN address, the DHCP range and reserved addresses, where available.
  • Status and connected devices — gateway, connection and device overviews.
  • Admin password — change the Admin Tool login.

Bridge mode is the clean way to use your own router with Xfinity and avoid double NAT. Once it is on, 10.0.0.1 stops being your router's address; sign in to your own router at its address instead.

If 10.0.0.1 won't load

  1. Check your connection. Be on the gateway's Wi-Fi or Ethernet, with mobile data and any VPN off. Xfinity public hotspots (xfinitywifi) are not your home gateway.
  2. Bridge mode on? If your own router sits behind the gateway in bridge mode, 10.0.0.1 will not respond through it. Use your router's address, or connect a computer directly to the gateway.
  3. Verify the gateway address. On Windows run ipconfig; on a phone check Wi-Fi details. If the default gateway is different, someone changed the LAN settings or you are on another router.
  4. Type http://10.0.0.1 explicitly, or try a private window or another browser.
  5. Restart the gateway. Unplug it for about a minute, plug it back in and wait until the light is steady. You can also restart it from the Xfinity app.

If the password is lost, a factory reset (holding the recessed reset button) restores admin / password but wipes your Wi-Fi name and password. Read the router reset guide first, and see can't access your router for more checks.

10.0.0.1 and the private address ranges

RFC 1918 reserves three IPv4 ranges for private networks:

  • 10.0.0.0 – 10.255.255.255 (about 16.7 million addresses)
  • 172.16.0.0 – 172.31.255.255 (about 1 million addresses)
  • 192.168.0.0 – 192.168.255.255 (about 65,000 addresses)

A home network uses only a small slice of whichever range the router picks, typically 254 addresses. The choice is a vendor default; it has no effect on speed or security.

Router addresses for other US ISPs and brands

ISP-specific guides: Spectrum, Verizon Fios, Cox and T-Mobile Home Internet.

Frequently asked questions

What is the default login for 10.0.0.1 on Xfinity?

Xfinity gateways have long used the username admin and the password password for the browser-based Admin Tool, and prompt you to change the password after the first login. If that combination does not work, someone has already changed it. You can reset the gateway to factory settings to restore the default, but that also erases your custom Wi-Fi name and password. The Wi-Fi password is separate and is shown on the gateway label and in the Xfinity app.

Should I use 10.0.0.1 or the Xfinity app?

Xfinity steers most home settings, such as the Wi-Fi name and password, connected devices, parental controls and port forwarding, to the Xfinity app and the Xfinity website. On recent gateways some of those options have moved out of the Admin Tool entirely. The Admin Tool at 10.0.0.1 is still where you find lower-level options such as bridge mode, local network (DHCP) settings and status information. If an option you expect is missing from 10.0.0.1, look in the app.

How do I put an Xfinity gateway in bridge mode?

Sign in at 10.0.0.1, open the gateway overview page (usually Gateway → At a Glance) and turn on Bridge Mode. The gateway restarts, turns off its own Wi-Fi and passes the public IP to the router you connect to it. After that, 10.0.0.1 is no longer how you reach your router: you sign in to your own router at its address instead. To undo it, connect a computer directly to the gateway and turn bridge mode off, or factory-reset the gateway. Menu names can differ by model.

Which other devices use 10.0.0.1?

Besides Xfinity gateways, 10.0.0.1 shows up on some business routers and firewalls, VPN and lab setups, and on home routers that someone manually moved to the 10.x range. Comcast Business gateways typically use 10.1.10.1, and older Apple AirPort base stations used 10.0.1.1. If you are not on Xfinity, check your device's default gateway to be sure.

What is the 10.0.0.0 address range?

10.0.0.0 to 10.255.255.255 is the largest of the three private IPv4 ranges set aside by RFC 1918 (the others are 172.16.0.0–172.31.255.255 and 192.168.0.0–192.168.255.255). Addresses in these ranges work only inside private networks and are never routed on the public internet. A home router using 10.0.0.1 is no faster or more secure than one using 192.168.1.1; it is just a different default.