↗GPSUNLOCK← Back to device unlock

Teltonika Configurator keyword recovery with PuTTY

Windows USB serial procedure • Updated October 28, 2026

This guide shows how to find the device’s COM port, configure PuTTY, request an unlock command using the device’s IMEI, and verify that Configurator password protection is off.

Verified device: FMM001 running 03.27.13 Rev01, including password-protected and locked-out states. FMB125 firmware 04.00.00 Rev13 has matching recovery code in static analysis, but hardware recovery has not yet been verified. This procedure clears the Configurator keyword; it is not an SMS-password reset or a full factory reset. Factory authentication alone is temporary: the old keyword returns after reboot. Complete step 12 to remove it persistently through Configurator.

Before you begin

1. Find the COM port in Configurator

  1. Open Teltonika Configurator and wait for the connected device to appear.
  2. Read the COM port displayed beside the USB symbol on the device tile. The example below shows COM8. Use the port shown for your device, even if Windows exposes another port too.
  3. Note the model and firmware version. You do not need to enter the locked configuration to read the tile.
  4. Close Configurator completely before opening PuTTY. Only one program should use this serial port at a time.
Configurator device tile: use the displayed configuration port. IMEI redacted.
Configurator device tile: use the displayed configuration port. IMEI redacted.

2. Set up the PuTTY session

Open PuTTY. On the Session page, select Serial under Connection type. Enter the port you noted in Serial line, and set Speed to 115200. Do not click Open yet.

Session settings. COM8 is the example port, not a required port number.
Session settings. COM8 is the example port, not a required port number.

3. Set the serial parameters

In the left-hand Category tree, select Connection → Serial.

SettingValue
Serial line to connect toYour device’s configuration COM port
Speed (baud)115200
Data bits8
Stop bits1
ParityNone
Flow controlNone
Connection → Serial: 115200 baud, 8 data bits, 1 stop bit, no parity or flow control.
Connection → Serial: 115200 baud, 8 data bits, 1 stop bit, no parity or flow control.

4. Set the terminal options

Select Terminal in the Category tree. Set Local echo and Local line editing to Force on. Check Implicit LF in every CR so carriage-return-only responses appear on separate lines. Leave other settings as shown.

Terminal: local echo and line editing forced on; implicit line feed enabled.
Terminal: local echo and line editing forced on; implicit line feed enabled.

5. Save the session and connect

Return to Session. Enter a name such as Teltonika under Saved Sessions, then click Save. Click Open to connect. For later connections, load this saved session and check that the COM port still matches Configurator.

For each command below, type or paste a single line, then press Enter (Return) to submit it. Local echo makes your input visible; a device response confirms that it was received.

6. Disable debug logging

.log:0

Press Enter. Expected response:

Log Disabled for UART[2]

The UART number may differ. This stops the scrolling debug output for the session.

7. Check whether recovery is needed

:sec_status

Press Enter. A successful query of an unprotected device looks like:

<SECSTAT>1,0,0,0,5

The five fields are query success, password protection enabled, authenticated, locked out, attempts remaining. If the first field is 1 and the second is 0, protection is already off: skip to step 11. If the second field is 1, continue. If the query fails or the response is unclear, resolve that before sending the unlock.

A protected device before lockout commonly reports:

<SECSTAT>1,1,0,0,5

You do not need to enter incorrect passwords or trigger the “Unlock required” dialog first.

8. Read this device’s IMEI

:cfg_info:3

Press Enter. The response has this form:

cfg_info:3:YOUR_15_DIGIT_IMEI

Copy only the 15 digits after cfg_info:3:. The placeholder above is not a literal device response.

9. Request your unlock command

Visit the GPS Unlock form, select Teltonika, and enter the 15-digit IMEI from step 8. Check the supported model and firmware details before paying, and double-check that the IMEI matches your device.

Complete the $5 USD one-time payment through secure checkout. Once payment is confirmed, your order page will display the unlock command for this device. Click Copy unlock command and continue to step 10. Save your private order link so you can view the command again without paying again.

Use the complete command exactly as provided, without adding quotes or spaces. The command is specific to your device; do not use a command supplied for a different device.

10. Send the command and verify

Paste the unlock command you received into PuTTY, then press Enter. Successful factory authentication returns:

<FACTORYAUTH>:1

Now send:

:sec_status

Press Enter. The verified successful recovery response is:

<SECSTAT>1,0,0,0,5

The second field, 0, confirms that Configurator password protection is off. The third field can remain 0 because you did not perform a normal password login. If factory authentication returns 0, or protection remains enabled, stop and retain the response for investigation rather than repeatedly sending commands.

PuTTY successful unlock with IMEI and token redacted
Successful unlock and status verification. IMEI and unlock token redacted. This session used :sec_status:?; the :sec_status command shown in the instructions was also verified on the tested device.

11. Reconnect through Configurator

  1. Close PuTTY to release the serial port.
  2. Open Teltonika Configurator and select the device.
  3. Confirm that you can access its configuration without the old keyword.

Access is restored immediately, without a reboot. Keep the device powered until you complete step 12: factory authentication alone does not permanently remove the saved keyword. Once connected, save a backup of the existing configuration before making your intended changes.

12. Remove the saved keyword permanently

On the tested FMM001, rebooting after factory authentication alone restored the old password. Complete the following sequence in Configurator before rebooting.

12a. Set a temporary keyword

Select Security in the left menu. Under Keyword Settings → Set keyword, enter a new temporary password in New Keyword and enter it again in Repeat Keyword. Click Set. The verified test used 0000; remember the value you choose.

Security → Set keyword: enter the same temporary keyword twice, then click Set.
Security → Set keyword: enter the same temporary keyword twice, then click Set. IMEI redacted.

12b. Remove that same keyword

After setting it, the page shows Remove Key and Change Key. In the Remove Key section, enter the temporary password you just set in Old Keyword, then click Remove. Despite its label, this field needs your new temporary password, not the device’s original unknown password.

Remove Key: enter the temporary keyword in Old Keyword, then click Remove.
Remove Key: enter the temporary keyword in Old Keyword, then click Remove. IMEI redacted.

12c. Confirm removal and verify after reboot

Confirm that Keyword Removed appears and the empty Set keyword fields return. Then reboot or power-cycle the device and reconnect through Configurator. Confirm that it opens without asking for a password.

Keyword Removed confirms the operation completed. Reboot and reconnect to verify persistence.
Keyword Removed confirms the operation completed. Reboot and reconnect to verify persistence. IMEI redacted.

Do not stop after merely setting the temporary password. The set-then-remove sequence is what was verified to persist. Labels may differ between Configurator versions.

Troubleshooting