I encountered a bug in MikroTik RouterOS 7.21.x where PPP secret passwords were not being saved correctly.
When creating or editing PPP users (especially for SSTP), the password field did not persist. Even after setting the password via CLI or WinBox, the user would appear with the flag X - disabled in /ppp secret print. Authentication failed because the password was effectively not stored.
Other fields such as service, profile, and comment were saved correctly, which suggested the PPP database itself was functioning. The problem persisted after reboot and occurred for every newly created PPP secret.
Example steps to reproduce (RouterOS 7.21.4):
/ppp secret add name=testuser password=test123 service=sstp profile=default
/ppp secret print detail where name="testuser"
Observed result:
The user appears disabled (X - disabled) and the password does not appear to be stored.
Additional checks performed:
- Verified
/ppp aaa print - Disabled RADIUS (
/ppp aaa set use-radius=no) - Removed local RADIUS entry
- Rebooted the router
- Tested with multiple new PPP users
None of these steps resolved the issue.
Environment:
RouterOS version: 7.21.4 (long-term)
Device: MikroTik RB3011UiAS
Resolution:
Upgrading RouterOS to version 7.22.2 resolved the issue completely. After the upgrade, PPP secret passwords were stored correctly and users no longer appeared disabled.
This appears to have been a bug in RouterOS 7.21.x.