How to remote access to Mikrotik Router via SSH and HTTPS

🌍 Enable secure remote access via SSH and HTTPS on your MikroTik router. Next, you should learn how to connect to it. Begin by connecting from a remote location. Start by connecting from a remote location. The next step is to understand the connection process. Remote access lets you manage your router from anywhere. However, you should always use secure channels to prevent unauthorized access.

In this guide, we’ll show you how to access your MikroTik router remotely using SSH (command-line) and HTTPS (web-based GUI). We assume you’ve already completed the steps to enable both services. Additionally, you should have secured your router.

🔐 How to Remotely Access MikroTik Router via SSH and HTTPS

📌 Prerequisites

• SSH and HTTPS services already enabled and properly configured on the router
• Public IP address or Dynamic DNS (DDNS) pointing to the router
• Appropriate port forwarding (if behind NAT/firewall)
• Access to the router’s WAN IP or domain name

💻 Method 1: Remote Access via SSH (Command-Line Interface)

🛠️ Requirements:

• A terminal application like:
  • macOS/Linux: Terminal
  • Windows: PowerShell, Command Prompt, or PuTTY

✅ Steps:

1. Open your terminal or SSH client (e.g., PuTTY).
2. Run the following command: ssh admin@<your-public-ip> -p <ssh-port>
   • Replace admin with your MikroTik username
   • Replace <your-public-ip> with the router’s public IP or DDNS address (e.g., router.example.com)
   • Replace <ssh-port> with the SSH port (e.g., 2222 if you changed it from the default 22)
   Example: ssh [email protected] -p 2222
3. Accept the SSH key fingerprint if prompted (first-time connection).
4. Enter your password when prompted.

You should now be inside your MikroTik CLI remotely!

🌐 Method 2: Remote Access via HTTPS (WebFig GUI)

🛠️ Requirements:

• Modern web browser (Chrome, Firefox, Edge)
• HTTPS enabled on the router (with self-signed or trusted certificate)

✅ Steps:

1. Open your browser.
2. Navigate to your router’s public IP or DDNS address with HTTPS and port: https://<your-public-ip>:<https-port>. Example: https://203.0.113.10:8443
3. You may get a warning about the certificate being untrusted (if using a self-signed cert). Proceed anyway or add a security exception.
4. Enter your MikroTik username and password.

You will now be logged into WebFig, the web-based configuration interface.

🔄 (Optional) Use MikroTik’s Dynamic DNS (DDNS) for Easier Remote Access

If your public IP changes often, use MikroTik’s built-in DDNS:

/ip cloud enable

Your router will get an address like yourrouter.sn.mynetname.net which you can use instead of the IP address.

✅ Final Thoughts

Secure remote access to your MikroTik router via SSH and HTTPS makes remote network management efficient and safe. Just remember to harden your security settings, use non-default ports, and restrict access by IP when possible.

🔗 Need MikroTik hardware for secure networking?
Check out our recommended MikroTik routers and accessories on our Amazon affiliate store. You’ll get high-performance devices, and your support helps us continue creating helpful content, at no extra cost to you!