To unlock or bypass a password on a Pro-face HMI (Human Machine Interface), you can use several methods depending on whether you have access to the project file or need to perform a hardware reset. Method 1: Reset via System Menu (Hardware Level)
This method is used when you cannot access the HMI due to a forgotten password.
Access the System Menu: On the physical HMI, touch the upper-right corner, then the lower-left corner. Repeat this three times quickly to bring up the system menu. Initialize Memory: Go to Offline mode > Initialize Memory.
Wipe Data: Select "Initialize User Memory" and "Initialize Backup SRAM."
Note: This process will delete all existing project data and programs currently stored on the HMI.
Default Passwords: If prompted for a maintenance or system password during initialization, try common defaults like 101 or 1101. Method 2: Using GP-Pro EX Software (Software Level)
If you have the original project file and the GP-Pro EX software, you can overwrite the password: Open Project: Open your .prx project file in GP-Pro EX.
Modify Security: Navigate to Project Manager > Utility > Screen Copy.
Remove Password: Copy the screens to a new project; often the transfer/upload password information is not copied in this process.
Transfer: Download the modified project back to the HMI to replace the locked version. Method 3: Default Credentials
If you are locked out of a specific system monitor or administrative screen, try these factory defaults: Username: admin Password: Pw#12345 Method 4: Remote HMI Access To reset a Remote Viewer password: Go to the physical HMI's Main Unit Settings.
Select Remote Viewer Settings > Pro-face Remote HMI Settings.
Enter a new password in the Connection Password box and save. Review: Pro-face HMI Security Features
Pro-face HMIs are known for robust security, but their lockout procedures are designed more for equipment protection than high-level encryption, which can be frustrating for maintenance.
Pros: Excellent multi-level security (up to 15 levels). You can assign specific passwords to certain screens or buttons, preventing unauthorized operators from changing critical machine parameters.
Cons: The "initialize" reset is a "nuclear option" that wipes the entire program. This makes it difficult to recover if you don't have a backup of the original project file.
Recommendation: Always use the Password Change Screen utility during development and keep a secure backup of your .prx files on a secondary server to avoid physical resets.
Do you have the original project file saved on a PC, or are you trying to recover a program directly from the unit? If you forget your password
Table_title: Countermeasure for the case you forget your password Table_content: header: | 1. | Initializing GP's memory（*1）（*2） | Pro-face by Schneider Electric
Getting locked out of a Pro-face HMI can stall a production line, but there are several ways to regain access depending on which security layer is active. 1. Try the Default Credentials proface hmi password unlock
If the HMI is relatively new or has recently undergone a factory reset, it might still be using the default manufacturer credentials.
For older models or specific system menus, some Pro-face devices use different defaults. Refer to the Official Pro-face Security Guide for a full list of system-level defaults. 2. Check the Project File (.prx) If you have access to the original
project file on your PC, you can find or change the password without touching the HMI. Open your project in Navigate to [Common Settings] [Security Settings] Here, you can view the defined for different security levels (Level 1, 2, 3, etc.).
If the project itself is password-protected, you will need that password first to open the file. 3. Use the Offline Management Menu
If you can reach the System Menu (usually by tapping opposite corners of the screen), you can check the HMI’s internal settings. Initialization Menu
In some cases, you can "Initialize" the user memory to wipe existing security settings.
This will delete the current project and data from the HMI, requiring a fresh download from GP-Pro EX. 4. Forcing a Project Download
When you can’t get past the login screen and don’t have the password, the most reliable "unlock" is to simply overwrite the HMI with a new project.
Connect your PC to the HMI via Ethernet or a Pro-face USB transfer cable. In GP-Pro EX, select Transfer Project
If the HMI asks for a password during the transfer, you may need to perform a "Force Transfer" or use the [Maintenance] tab in the Transfer Tool to clear the backup memory. 5. Contacting Support
If the unit has a "System Password" set at the BIOS/firmware level that prevents even a project download, you may need to contact Pro-face Technical Support
with the model and serial number to see if a master override is possible for your specific hardware version. Need help with a specific model? Let me know the GP-Pro EX version HMI model number (e.g., GP-4501TW).
White Paper
Title: Bypassing Operational Lockouts: A Technical Analysis of Authentication Recovery and Vulnerability Assessment in Pro-face HMI Systems
Abstract Human-Machine Interfaces (HMIs) serve as the critical intersection between human operators and industrial control systems (ICS). As these devices become increasingly networked, the security of their configuration environments is paramount. This paper explores the architectural structure of password storage and authentication mechanisms within Pro-face HMI hardware. It details the methodologies for forensic recovery of access credentials in "lockout" scenarios, analyzes the risks associated with unprotected project files, and discusses the broader implications for Operational Technology (OT) security lifecycle management.
Why 1101? It is the factory default code hardcoded into Proface’s bootloader. Many engineers never change it. If your HMI has not been specifically secured, 1101 will work instantly.
Appendix A: Password Recovery Request Template To be submitted to Pro-face distributor:
Appendix B: Hexadecimal Offset Table for Legacy PRX Files | HMI Series | Offset (hex) | Encoding | |------------|--------------|----------| | GP-2000 | 0x2A4 | ASCII (8 chars) | | GP-3000 | 0x1F8 | XOR 0x55 |
Unlocking a Pro-face HMI (Human Machine Interface) is a common task for maintenance engineers who have forgotten a password or inherited a locked device. The method for regaining access depends on whether you are trying to access the offline system menu, transfer data, or view protected screens. 1. Default System Passwords To unlock or bypass a password on a
Before attempting a full reset, try the manufacturer's default factory passwords.
Default System/Offline Password: The most common factory default for entering the "Offline" mode is 1101.
Other Common Defaults: Depending on the model and system integrator, you can also try 101, 111111, or abcdef. 2. Unlocking Offline Mode & Factory Reset
If you cannot remember the custom password to enter Offline mode, you must perform a factory reset. Note: This will permanently delete all screen data and project files on the HMI.
Access Offline Mode: To trigger the menu, touch two opposite corners of the screen (e.g., top-left then bottom-right) within one second.
Navigate to Initialization: Select [INITIALIZE] → [INITIALIZE GP MEMORY].
Enter Reset Password: When prompted for a password to initialize, enter 1101 (the default for reset operations).
Confirm: Select "Yes" or "Start" to wipe the memory. The HMI will reboot to its factory state, allowing you to download a new project. 3. Unlocking Transfer Passwords (GP-Pro EX)
If the HMI is locked during an attempt to upload or download a project using GP-Pro EX , you can remove the password if you have the original project file. Remove Password via Software: Open the project in GP-Pro EX.
Go to [Project (F)] → [Information (I)] → [Project Information (I)]. Select [Passwords] from the left-hand menu. Under [Send/Receive], click [Set Password].
Enter the existing password, then leave the new "Password" and "Confirm" fields blank and click OK.
Force Download: If you do not have the password, you can often "Force Download" a new project to overwrite the old one, which resets the security settings. 4. Bypassing Screen Security Levels
Pro-face HMIs often use "Level Mode" (Level 1–15) to restrict access to specific buttons or screens.
Anyone with knowledge of Pro-Face HMIs (legacy - PLCtalk.net
Unlocking a Pro-face HMI is a critical maintenance task often necessitated by forgotten credentials or personnel turnover
. While the system provides robust multi-layered security, the "unlocking" process typically involves either using factory defaults for administrative access or a full memory initialization when custom passwords are lost. 1. Core Password Layers in Pro-face Systems
Understanding what needs "unlocking" is the first step, as Pro-face HMIs utilize three distinct, independent password types: System Password (Offline Mode):
Used to access the HMI's internal configuration menus. The factory default is Project File Password: Protects the project file from unauthorized editing or viewing in Transfer Password (Send/Receive):
Required to upload (receive) the project from the HMI to a PC or download (send) a new file to the unit. 2. Official Methods for Password Unlocking The "1101" Phenomenon Why 1101
If the custom password is forgotten, Pro-face typically requires a "scorched earth" approach to regain access:
Unlocking a Pro-face HMI usually involves using a default password or performing a factory initialization if the password is forgotten.
Warning: Initializing the HMI memory will delete all screen data and project files. Pro-face by Schneider Electric Common Default Passwords
Before resetting, try these common default system passwords: Standard Default: Other common variants: GP-Pro EX / System Monitor: and password Pro-face by Schneider Electric How to Reset a Forgotten Password
If you cannot bypass the password, you must initialize the internal memory to return the unit to factory defaults. Enter Offline Mode:
Press and hold the top-left corner and then the bottom-right corner of the screen (or similar corners depending on the model) to bring up the menu. Access Initialization: [INITIALIZE] right arrow [INITIALIZE GP MEMORY] [Initialization Menu] Choose Memory Type: [Initialize User Memory] [Initialize Backup SRAM] Enter System Password: When prompted, enter the default when asked "Is that really alright?". Pro-face by Schneider Electric Password Recovery & Software Management Transfer Passwords: If you have the project file in , you can remove transfer passwords by going to Project (F) right arrow Information (I) right arrow Project Information (I) right arrow and clearing the fields. Screen Copy Utility: You can try to copy screen data
without copying the password information by using the Screen Copy utility in GP-PRO/PB III Connection Keys:
Modern Pro-face HMIs may use a "Connection Key." If lost, this can also be reset via the same memory initialization procedure in Offline Mode. Pro-face by Schneider Electric For official technical support, you can visit the Pro-face Service & Support page Do you have the original project backup , or are you trying to retrieve a program from an existing HMI unit
The Pro-face HMI Password Unlock feature is a critical security management tool designed to restore access to human-machine interface units when credentials are lost or system lockouts occur. This feature balances operational uptime with industrial security protocols to ensure that authorized maintenance personnel can regain control without losing critical project data. Core Capabilities
Emergency Level Reset: Provides a multi-tiered recovery process, allowing administrators to reset specific user levels (e.g., Operator, Maintenance, Manager) without a full factory reset.
Default Credential Recovery: Facilitates access using factory defaults—such as the common admin username and Pw#12345 password—for initial setup or after a system-wide wipe.
Remote Connection Management: Allows for the modification of the Server Connection Password directly through the HMI’s physical interface under "Pro-face Remote HMI Settings" to restore mobile or PC-based viewing access.
GP-Pro EX Software Integration: Enables engineers to bypass local HMI locks by downloading a new security configuration from the GP-Pro EX development software, overwriting the existing password database. Security & Compliance
Encrypted Storage: Passwords are saved in an encrypted format within the HMI's internal memory to prevent unauthorized extraction via physical hardware tampering.
Audit Trail Logging: Every password unlock or reset attempt is logged within the HMI’s internal system alarm history, providing a clear record for security audits.
Lockout Protection: Implements a "cool-down" period after multiple failed attempts to prevent brute-force attacks, requiring a manual physical reboot or a time delay before the next attempt. Pro-face Default Credentials
If you are currently locked out, try these default settings from Pro-face first: Username: admin Password: Pw#12345
For further technical support or firmware-specific unlock tools, you can visit the official Pro-face Support Portal.
For severe lockouts (forgotten system passwords), Proface introduced a hardware-level clear.