Port 67: DHCP

Port 67 is where a DHCP server listens for address requests. Clients broadcast from port 68, and the server replies from port 67 with an IP lease, gateway, and DNS settings.

UDPCore servicesUnencrypted by defaultIANA assigned
Port number67
ServiceDHCP server (BOOTP)
ProtocolUDP
CategoryCore services
Default encryptionNo
Security note. Port 67 is not encrypted by default. Restrict it to trusted networks, or use an encrypted alternative where one exists, to avoid exposing credentials and data in transit.

Frequently asked questions

What is port 67 used for?

Port 67 is where a DHCP server listens for address requests. Clients broadcast from port 68, and the server replies from port 67 with an IP lease, gateway, and DNS settings.

Is port 67 TCP or UDP?

Port 67 (DHCP) uses UDP.

Is port 67 secure?

Port 67 is not encrypted by default. Where possible, use an encrypted alternative or tunnel it over TLS or a VPN.

Should I open port 67 on my firewall?

Only if you specifically need DHCP. Expose it to the smallest set of trusted sources, and never open database or Windows-service ports to the whole internet.