RouterOS, by default, does not use a password for the admin user. The first thing you should do is to change the blank password to something else. From the GUI menu, select System | Users and select the default admin user and change its password.
Then, it is recommended to limit the connection to the management interface of the RouterOS using firewall rules. Switch to IP | Firewall from the menu and define the following firewall rules:
ID |
Chain |
Source address |
Action |
Notes |
0 |
Input |
Z.Z.Z.Z |
Permit |
Your home IP address, so you can connect to the virtual router |
1 |
Input |
172.16.1.0/24 |
Permit |
Allows connectivity from the management network |
2 |
Input |
10.0.0.0/8 ... |