Configuration not saved, or reverted

Hi,
My home router is a Hap AC (RB962UiGS-5HacT2HnT). It’s been in service only for a couple of weeks now and has been working fine. However overnight it suddenly lost three quarters of my wireless configuration. In my configuration I used my own SSID on both of the two physical wireless interfaces for 2.4GHz and 5GHz, wlan1 and wlan2. I also created a new security profile which was assigned to two virtual interfaces which I called wlan3 and wlan4, to provide a second SSID again on both frequencies. This was all in place and working for a couple of weeks, but I can’t be sure whether the router was ever rebooted during that time.
This morning most of that configuration had gone, the new security profile and the two virtual interfaces we gone and one of the two physical interfaces had reverted to the default “Mikrotik” SSID. The other wlan interface had retained my customer SSID.
So that’s a bit odd, it didn’t lose all its wireless configuration, and it didn’t lose the rest of the configuration either.
Is it possible the configuration wasn’t saved, by which I mean is there a way that I could have made the changes come into effect, but not be saved?
Thanks, Tony S

Did you have a system logged in all that time, that then got disconnected?
When you had “Safe mode” enabled that would cause such behavior.

There is no “save configuration” in RouterOS, everything you apply is always immediately saved. (sometimes nice, sometimes not so nice…)
When there are config changes that you did not make yourself, consider the possibility that the device was hacked.
When it has winbox open to everyone on internet, that is quite likely to happen (especially when you did not keep it uptodate).

Thanks for the response. I now think “Safe Mode” is the most likely cause. I have been in the habit of leaving Winbox running on the desktop PC, and the PC had some sort of crash or reboot. I guess I must have selected Safe Mode (without knowing what I was doing) when I carried out the last changes. That would explain why it didn’t revert anything else, the IP addressing or routing and DHCP configuration.

You last comment is a concern though …
“When it has winbox open to everyone on internet, that is quite likely to happen (especially when you did not keep it uptodate).”
Is there some special way that a Mikrotik device is open to access from the Internet, in a way that other equipment wouldn’t be, via some Mikrotik cloud service or something? I don’t have any inbound connections permitted on my firewall configuration, and in fact conventional inbound access would be difficult or impossible as my LTE connection uses CGNAT, then in fact I have NAT between the Hap and the LTE router as well.

Ok you probably have read by now that opening safe mode will open an undo buffer that will be used when the client (winbox) is disconnected.
This is normally used during risky operations to rollback changes that disrupt connectivity to the device.
Leaving it open means your changes will be rolled back at some later time :frowning:

The default firewall does not open winbox to the internet, only to the LAN.
Some people put extra rules in there to allow winbox access from internet. Don’t do that!!
When you need to manage the device from internet, configure a VPN service and allow access from there.
That puts an extra security layer (being able to setup the VPN, with associated key/user/pass) in front of the winbox service.
The winbox service has turned out to be vulnerable several times now, e.g. in older versions having winbox open meant that you could download the cleartext password list from the device!