List of menus with sensitive parameters

Sensitive parameters — passwords, keys and secrets — are left out of export and print output unless you use the show-sensitive flag. WinBox hides them when the "Hide password" option is enabled. The one exception is user passwords: they are stored hashed and are never exported, not even with show-sensitive.

The table lists the menus where sensitive parameters can be configured, the parameter names, and links to the menu documentation.

Menu	Parameter names	Page link
/container	password	Container#Containerconfiguration
/ip/hotspot	mac-auth-password, password, otp-secret	HotSpot - Captive portal#HotSpotUsers
/iot	password, key	password - MQTT#Brokers key - Lora#Servers
/interface/gre /interface/gre6	ipsec-secret	GRE#Properties
/interface/ipip /interface/ipipv6	ipsec-secret	IPIP#Properties
/interface/eoip /interface/eoipv6	ipsec-secret	EoIP#PropertyDescription
/interface/6to4	ipsec-secret	6to4#6to4-PropertyDescription
/interface/ppp-client	password, pin	Work in Progress PPP
/interface/sstp-client	password	SSTP#Properties
/interface/l2tp-server /interface/l2tp-client /interface/l2tp-ether	ipsec-secret, password	ipsec-secret, password - L2TP#L2TPClient ipsec-secret - L2TP#L2TPServer ipsec-secret - L2TP#L2TPEther
/interface/ovpn-client	password	OpenVPN#OVPNClient
/interface/pptp-client	password	PPTP#PPTPClient
/interface/pppoe-client	password	PPPoE#PPPoEClient
/ppp/secret	password	PPP AAA#UserDatabase
/ppp/l2tp-secret	secret	Work in Progress
/ip/ssh/export-host-key /ip/ssh/import-host-key	passphrase	SSH
/ip/ipsec	auth-key, enc-key, ppk-secret, secret, password, passphrase, key	auth-key, enc-key - IPsec InstalledSA secret, password - IPsec Identity ppk-secret - Work in Progress IPsec Peer key, passphrase - Work in Progress IPsec Keys
/system/ssh-exec	password	SSH
/user	password	User
/disk	nvme-tcp-server-password, nvme-tcp-password, smb-server-password, smb-password, self-encryption-password, encryption-key, sshfs-password	nvme-tcp-server-password, nvme-tcp-password - NVMe over TCP sshfs-password - Work in Progress smb-server-password, smb-password - SMB self-encryption-password, encryption-key - Self-Encrypting Drives
/interface/vrrp	password	VRRP#Parameters
/interface/dot1x	password	Dot1X#Client
/interface/macsec	cak	MACsec#PropertyReference
/interface/wireguard	private-key, preshared-key, *show-client-config	WireGuard
/interface/lte	pin, password	LTE/5G#LTEClient
/ip/socks/users	password	SOCKS
/ip/cloud	vpn-private-key, vpn-peer-private-key, private-key	Back To Home
/ip/smb	password	SMB#Usersetup
/password	old-password, new-password, confirm-new-password	Password change command; no dedicated documentation page available.
/radius	secret	RADIUS#RADIUSClient
/routing	password, tcp-md5-key, auth-key, key	password,key - /routing/rip tcp-md5-key - /routing/bgp/connection auth-key - /routing/ospf
/snmp/community	authentication-password, encryption-password	SNMP#CommunityProperties
/system/backup	password	Backup
/system/ntp/key	key-val	Work in Progress NTP
/system/swos/password	new-password, confirm-new-password	SwOS password change command; no dedicated documentation page available.
/system/package/local-update	password	Packages#LocalUpdate
/system/license	password	RouterOS license keys#CHRLicenseLevels
/tool/romon	secrets	RoMON#Configuration
/tool/sms	sim-pin, secret	SMS#Receiving
/tool/email	password	E-mail
/tr069-client	connection-request-password, password	TR-069#ConfigurationSettings
/user-manager	web-private-password, paypal-password, shared-secret, password, otp-secret	shared-secret - User Manager#Routers paypal-password, web-private-password - User Manager#Advanced password, otp-secret - User Manager#Users
/interface/wifi	passphrase, eap-password	WiFi#SecurityProperties
/caps-man	private-passphrase, passphrase	private-passphrase - CAPsMAN#CAPsMANAccess-list passphrase - CAPsMAN#CAPsMANconfiguration
/interface/wireless	static-key-0, static-key-1, static-key-2, static-key-3, static-sta-private-key, management-protection-key, nv2-preshared-key, private-key, private-pre-shared-key, wpa-pre-shared-key, wpa2-pre-shared-key, mschapv2-password	static-key-0, static-key-1, static-key-2, static-key-3, static-sta-private-key - Wireless Interface#WEPproperties management-protection-key, private-key, private-pre-shared-key - Wireless Interface#Properties wpa-pre-shared-key, wpa2-pre-shared-key - Wireless Interface#WPAproperties mschapv2-password - Wireless Interface#WPAEAPproperties nv2-preshared-key - Wireless Interface#Generalinterfaceproperties
/interface/w60g	password	W60G#Generalinterfaceproperties
/zerotier	identity	ZeroTier#Parameters
/certificate	export-passphrase, passphrase, challenge-password, pin, key-passphrase, challenge-passphrase	pin - used for card-reinstall and card-verify commands, no dedicated documentation page available. export-passphrase - Certificates#ExportCertificate passphrase - Certificates#ImportCertificate challenge-password, key-passphrase, challenge-passphrase - Work in progress