• Home
  • Internet Routers
  • Home Internet

The FCC’s Router Ban Is About to Become a 'Mess.' Here's What It Means for Your Home Network

The crackdown on foreign-made routers labeled a "national security risk" affects most major router brands. If you plan on buying a router soon, read this first.

Headshot of Joe Supan
Headshot of Joe Supan
Joe Supan Senior Writer
Joe Supan is a senior writer for CNET covering home technology, broadband, and moving. Prior to joining CNET, Joe led MyMove's moving coverage and reported on broadband policy, the digital divide, and privacy issues for the broadband marketplace Allconnect. He has been featured as a guest columnist on Broadband Breakfast, and his work has been referenced by the Los Angeles Times, Forbes, National Geographic, Yahoo! Finance and more.
Joe Supan
8 min read
wifi-routers-on-green-bacground-with-banned-symbol
CNET/Amazon

In an unprecedented move, the Federal Communications Commission announced on March 23 that it will be banning the sale of new foreign-made Wi-Fi routers going forward, citing "unacceptable risks" to national security.

The ban doesn't apply to any existing routers that the FCC has already authorized, so you don't need to rush out and replace your router immediately. If you were thinking about buying a new router soon, I'd hold off until we learn more about how the ban shakes out.

The order currently applies to any new models “produced in foreign countries.” Router manufacturers can apply for an exemption, but so far, none have been granted "Conditional Approval" on the FCC’s website

This is a monumental development for the domestic Wi-Fi router market. With the exception of newer Starlink routers, nearly every router available for purchase in this country is at least partially manufactured outside the US, including TP-Link, Asus and Netgear. An estimated 60% of routers in the US are manufactured in China.

According to a list of FAQs published by the FCC, a router will be considered foreign-made if “any major stage of the process through which the device is made, including manufacturing, assembly, design and development” occurs outside the US. 

“Following President Trump’s leadership, the FCC will continue do our part in making sure that US cyberspace, critical infrastructure and supply chains are safe and secure,” said FCC Chair Brendan Carr in a statement

When CNET reached out to the FCC for more clarity on the order, we were referred to the commission's "Covered List" FAQ page.

The FCC says that routers produced abroad were “directly implicated” in the Volt, Flax and Salt Typhoon cyberattacks. The Salt Typhoon attack specifically exploited Cisco routers to gain access to the networks of US internet providers like AT&T, Verizon and Lumen, which owns CenturyLink and Quantum Fiber.

“This is using an extremely blunt instrument, and it’s going to impact many harmless products in order to stem a real problem,” William Budington, a technologist for the digital rights nonprofit Electronic Frontier Foundation, told CNET. “This takes place in the context of mass defunding of cyberdefense initiatives. There's a lack of a good federal testing lab for consumer grade routers due to budget cuts.”

This doesn’t mean you have to replace your existing router: The FCC clarified that the ban doesn’t apply to routers already purchased. However, you won’t be able to buy new routers that the FCC hadn’t already authorized before the ban. 

TP-Link specifically has been in the US government’s crosshairs for over a year, stemming from its ties to China, with more than half a dozen US departments and agencies reportedly backing a ban at the end of 2025.

But this week's FCC action goes well beyond TP-Link and will affect nearly every router company operating in the US.

Can your router still be used?

You can still use your existing router, but there is one big caveat hidden in the FCC’s Public Notice: “All routers authorized for use in the United States may continue to receive software and firmware updates that mitigate harm to US consumers at least until March 1, 2027.”

Firmware updates are essential to both your router’s performance and security. Most router companies issue automatic firmware updates to fix security vulnerabilities as they pop up, and you may not even be aware when they happen.

If a router can’t update its firmware after March 1 of next year, it’s generally considered unsafe to continue using, as your Wi-Fi network could become vulnerable to malware or other cybersecurity threats without regular firmware updates.

"The risk is very real," said Rik Ferguson, vice president of security intelligence at cybersecurity company Forescout. "If you find yourself in a situation where that update pipeline has been switched off, then you definitely have to consider whether you want to keep using that device."

"The risk just keeps going the longer time passes, because chances are that there will be new vulnerabilities being found that you cannot patch," added Daniel Dos Santos, vice president of research at Forescout.

Router companies are surely scrambling behind the scenes right now to get added to the FCC’s “Conditional Approval” list, which would allow them to sell new models and continue issuing software and firmware updates to routers that have already been approved. 

There is some wiggle room in there. The FCC notice specifically says “at least” March 1, so it’s possible the deadline will be pushed back.

But if your router hasn’t been added to the exemption list by this time next year, I’d recommend swapping it out for a model that has FCC approval to continue receiving firmware updates. 

“I don't think it's going to change the manufacturing landscape, because manufacturing processes are expensive to move and device manufacturers are probably going to just wait it out until the ban is lifted. So I don't think it's going to have the intended effect,” Budington said. 

Should I wait or rush to buy a new router? 

The FCC’s ban on foreign-made routers only applies to devices that haven’t already been approved. That means any router that’s currently for sale will still remain on the shelves, and you can continue to use your existing router as long as you’d like.

Because any router that’s available now has already gotten FCC authorization, there’s no need to rush out and buy a new router. In fact, I would recommend the opposite: holding off on buying a new router until some of the dust settles on the FCC order. That advice was echoed by the seven experts I polled for this story.

"I would recommend to wait at least for a few weeks or a month to see what are the real implications of this," Sergey Shykevich, a threat intelligence manager at Check Point Research, told me.

If you buy a new router today, there’s a risk that the FCC won’t exempt it, and it will stop getting software and firmware updates after March 1 of next year.

“A lot of those routers are going to turn into pumpkins in a year unless they extend this waiver,” Alan Butler, senior counsel at the Electronic Privacy Information Center, told me.

CNET recently tested and reviewed more than 30 Wi-Fi routers, and while we stand by all of our picks, I’d recommend holding off on a purchase until we have more information on the FCC’s ban. 

Which routers are impacted by the ban?

Representatives for the FCC couldn’t tell me which specific router companies will be subject to the ban, but nearly every Wi-Fi router available in the US has some stage of “manufacturing, assembly, design and development” occurring outside the country. (Starlink is apparently the only exception; the company says its newer routers are manufactured in Texas, according to the BBC.) 

Untangling each router’s supply chain will be a complicated process, and router companies are likely already lobbying the FCC for “Conditional Approval.” 

“Every single one of these devices, even if the final assembly happens in California, for example, they're all going to come with components that are manufactured in China, as an example,” Sonu Shankar, chief product officer at Phosphorus Cybersecurity, told CNET. 

CNET reached out to 10 of the top router manufacturers for comment. So far, companies seem to be taking a friendly public approach to the FCC, even when they’re clearly subject to the ban. Netgear, for example, highlighted its US headquarters, even though its routers are manufactured in Vietnam, Thailand, Indonesia and Taiwan.

Router company Status following the announcement
Asus Headquartered in Taiwan, subject to the ban.
Cisco Does not sell new consumer-grade routers, not subject to the ban.
D-Link Headquartered in Taiwan, subject to the ban.
Eero Manufacturing in Asia, subject to the ban.
Linksys Owned by Foxconn, a Taiwanese multinational. Subject to the ban.
Nest Manufacturing in Taiwan and Malaysia, subject to the ban.
Netgear Publicly supporting the ban, but has manufacturing in Vietnam, Thailand, Indonesia and Taiwan.
Starlink Routers are made in Texas, not subject to the ban.
Razer Dual headquarters in California and Singapore, likely subject to the ban.
Synology Headquartered in Taiwan, subject to the ban.
TP-Link Planning to establish US-based manufacturing, the company said the move is a “positive step.” Currently subject to the ban.

A Netgear representative told CNET in an email that the company commends the Trump administration and the FCC for their action toward a safer digital future. "As a US-founded and headquartered company with a legacy of American innovation, Netgear has long invested in security‑first design, transparent practices, and adherence to government regulations, and we will continue to do so," the representative said.

TP-Link Systems Inc. also applauded the order. “Placing all manufacturers and their supply chains under the same scrutiny is a positive step in the direction of making the router industry more secure,” a TP-Link Systems representative told CNET in an email. According to the representative, the company had already been planning to establish US-based manufacturing. TP-Link says on its website that it has manufactured all products sold in the US in Vietnam since 2018.  

CNET also reached out to Asus, D-Link, Eero, Linksys, Nest, Razer and Synology, but has not yet received responses. 

What if you get your router from your ISP?

Nearly 70% of Americans rent their routers from their internet service provider. The FCC’s ban will impact them, too, as they also rely on foreign-made parts for their Wi-Fi equipment. 

The analytics site, Ookla, looked at speed tests from 2026 and found the top three Wi-Fi router vendors for four of the largest ISPs. None of them are manufactured entirely in the US. (Disclosure: Ookla is owned by the same parent company as CNET, Ziff Davis.)

Operator Verizon (prior to Frontier acquisition)ComcastCharterAT&T (prior to Lumen transaction)
Top vendors 1. Arcadyan
2. Wistron
3. Netgear
1. Arris
2. Netgear
3. Technicolor
1. Askey
2. Sagemcom
3. Netgear
1. Humax
2. Nokia
3. Netgear

If you rent equipment from your ISP, you can take some comfort in knowing that it’s on them to be compliant with the FCC and keep your network secure. Doug Dawson, a veteran broadband analyst and author of the industry blog POTs and PANs, said ISPs have been taking a "wait and see" approach so far.

“There's no panic right now. Whatever you're using now is just fine with them,” Dawson told me. “ISPs are not anxious to replace people's equipment. Nobody wants to go spend $100 a household.”

If you haven’t replaced your equipment in a few years, now's a good time to call your ISP and ask about available options. They might not replace your equipment proactively on their own, but they often have equipment upgrades available if you ask.  

How to protect yourself if you have a foreign-made router

Router manufacturers aren’t always the most transparent about their supply chains, but unless you use a Starlink router, some component of your router’s manufacturing likely takes place outside the US. 

“Vulnerabilities don't have an inclination towards a national origin,” Shankar told me. “It doesn't matter if it's a Chinese-made router or an American-made router if a user does not change a default password.” 

No matter where it’s from, your router will be far more secure if you follow some basic best practices. Here’s what experts recommend: 

  • Keep your firmware up to date: One of the most common ways malicious actors access your network is through outdated firmware. You can ensure your router has the latest firmware by enabling automatic updates in your router’s settings or manually downloading updates in the app or web portal.  
  • Strengthen your credentials: If you’ve never changed the default login credentials on your router, now’s the time to do it. Weak passwords are the cause of many common attacks. “Devices using default or weak passwords are easy targets,” Itay Cohen, a security researcher at Palo Alto Networks, told me in a previous interview. “Default or simple passwords can be easily brute-forced or guessed.” Most routers have an app that lets you update your login credentials from there, but you can also type your router’s IP address into a URL. These credentials differ from your Wi-Fi name and password, which should also be changed every 6 months or so. The longer and more random your password, the better
  • Consider using a VPN: For an added layer of protection, a virtual private network encrypts all your internet traffic and prevents your internet provider (or anyone else) from tracking the websites or apps you use. You can find CNET’s picks for the best VPN services here
Provider Details
Compare
Edit Zip code
  • Home
  • Internet Routers
  • Home Internet

My Expert Advice: Don’t Buy a Router Until We Know More About the FCC's Ban

The FCC’s sweeping ban applies to the sale of virtually every new Wi-Fi router. Without regular updates, yours might turn into a pumpkin by 2027.

Headshot of Joe Supan
Headshot of Joe Supan
Joe Supan Senior Writer
Joe Supan is a senior writer for CNET covering home technology, broadband, and moving. Prior to joining CNET, Joe led MyMove's moving coverage and reported on broadband policy, the digital divide, and privacy issues for the broadband marketplace Allconnect. He has been featured as a guest columnist on Broadband Breakfast, and his work has been referenced by the Los Angeles Times, Forbes, National Geographic, Yahoo! Finance and more.
Joe Supan
8 min read
hands connecting internet cable to router with antennas on table and pink background
Proximo/Getty Images

Key takeaways:

  • The Federal Communications Commission has banned the sale of new foreign-made routers in the US. The sweeping order applies to virtually every Wi-Fi router currently available in the US market.
  • After speaking with seven industry experts, my advice is to hold off on buying a new router if you can. 
  • Under the current rules, banned routers will no longer receive essential security firmware and software updates after March 1, 2027. 
  • The FCC’s action has effectively frozen the entire market while router companies scramble to gain approval. 
  • More specific information on which router companies will be subject to the ban is expected to become clearer within the next month or two. 

It's not often that we get bombshell news in the router world, but the FCC’s move to ban the sale of foreign-made routers in the US is absolutely unprecedented.

The sweeping order applies to any router in which any stage of “manufacturing, assembly, design and development” occurs outside the US -- in other words, just about any router you can buy right now. The argument is that they pose "unacceptable risks" to national security. Ironically, the order also prevents existing foreign-made routers from receiving vital security updates after March 1, 2027.

The ban doesn’t apply to routers that were already authorized by the FCC -- only new models that haven’t been approved yet. That means every router that was available before the order is still available today, and router companies can still restock them using their existing manufacturing processes. 

Essentially, the FCC is freezing the Wi-Fi router market. As William Budington, a technologist for the digital rights nonprofit Electronic Frontier Foundation, put it to me, “This is using an extremely blunt instrument.”

Where previous FCC bans have been limited to specific companies, such as last year’s push to ban TP-Link routers, this one affects an entire industry. So where does that leave someone who needs a new Wi-Fi router? Should you buy a model you’ve had your eye on in case it sells out? Or is it better to wait and see which companies the FCC considers foreign-made?

I know what I would do, but I gut-checked my advice with four cybersecurity experts. Turns out, we agree. 

My advice: Hold off on buying a new router for now

When I first saw the FCC’s announcement, I couldn’t stop thinking about how much chaos this would introduce to the US router market. As I tried to tease out which manufacturers would count as “foreign-made,” it quickly became clear how deeply international the supply chains for routers are. 

Understanding the scope of the ban

Take Netgear. While it’s a US-founded and headquartered company, it manufactures routers in Vietnam, Thailand, Indonesia and Taiwan. With the exception of Starlink -- the company says its newer routers are made entirely in Texas, according to the BBC -- I couldn’t find a single router brand that’s homegrown. 

I don’t have any issues recommending routers that were manufactured abroad. After all, they’d already gone through the FCC’s authorization process, and I haven’t seen convincing evidence that any one router brand has more hardware vulnerabilities than another. 

Thomas Pace, CEO of cybersecurity firm NetRise, told me last year during an interview about the potential TP-Link ban: "We've analyzed an astonishing amount of TP-Link firmware. We find stuff, but we find stuff in everything.”

I just finished testing, reviewing and rating over 30 routers, and after years of resistance, I finally concluded that Wi-Fi 7 routers are worth the money for the speeds you get. While I stand by my recommendations, with this ban in place, the router you buy today may not be any good in a year. 

The future-looking security risk

Then I saw the FCC’s Public Notice on the ban, which specifies that manufacturers can continue providing software and firmware updates “at least until March 1, 2027.” That means if you own a foreign-made router -- if you own any router, in other words -- it won’t be able to get security patches after that deadline. 

That’s why I think the wise move here is to wait on buying one if you can. Keeping your router’s firmware up-to-date is an essential part of securing your home network. If you buy from a router company that doesn’t get an exemption from this ban, you risk having an unsecured device a year from now. 

It’s an ironic side effect of an order that is ostensibly designed to keep Americans safer: They may no longer be able to get the latest security fixes.  

“If you're limiting the ability of people to get security updates, then you’re making the problem worse, not better,” Alan Butler, senior counsel at the Electronic Privacy Information Center, told me. “A lot of those routers are going to turn into pumpkins in a year unless they extend this waiver.”

By saying you can update your firmware “at least until March 1, 2027,” the FCC does leave some wiggle room for an extension. But until we know more about which companies the FCC considers foreign-made and which will be exempt, I wouldn’t feel comfortable recommending spending money on a new router right now. 

"The risk is very real," said Rik Ferguson, vice president of security intelligence at cybersecurity company Forescout. "If you find yourself in a situation where that update pipeline has been switched off, then you definitely have to consider whether you want to keep using that device."

"The risk just keeps going the longer time passes, because chances are that there will be new vulnerabilities being found that you cannot patch," added Daniel Dos Santos, vice president of research at Forescout.

Advice for immediate router needs  

If your old router stopped working, I’m not going to tell you to wait for clarity from the FCC to get back on Wi-Fi -- the timeline for concern is more in years than months. A good compromise might be to buy an older budget router rather than the latest Wi-Fi 7 model you’ve had your eye on. But if you can afford to wait a month or two, it’s worth exercising some caution. 

“I do think this is going to become a mess very quickly,” Butler said.

This is the messiest point in the process we’re likely to see. As the dust settles in the coming weeks, we’ll likely have better information on which routers will still be safe to use a year from now. 

black-wifi-router

TP-Link is one of the most popular router brands in the US, and the subject of several 2025 government investigations.

Gianmarco Chumbe/CNET

What if you rent your router from your ISP?

Where does this order leave the 70% of Americans who rent their internet equipment from their internet service providers? The FCC’s ban will impact them, too, as they also rely heavily on foreign-made routers

Essentially, my advice is no different than it is for people who own their routers: Don't panic, and wait to see how things shake out. If you haven't upgraded your equipment in a few years, now might be a good time to call your ISP and ask them what options are available. But it's not likely that they'll proactively replace them on their own, says Doug Dawson, a veteran broadband analyst and author of the industry blog POTs and PANs.

"I don't see any mass replacement of these things, because it's just too much money," Dawson told me. "I'd guess before any deadline on firmware updates, they're going to issue those three days before that and then they're going to cross their fingers that they don't start seeing problems."

Expert opinion: Is your current router still safe to use?

When I polled four cybersecurity experts, I was surprised to find that they were generally in favor of the FCC taking action to protect router security in theory, but critical of the execution. 

“It’s going to impact many harmless products in order to stem a real problem,” Budington said.  “It's also not particularly well-targeted, since routers are only one part of the problem, along with IoT devices.”

The concern for national security risk 

The FCC says that routers produced abroad were “directly implicated” in the Volt, Flax and Salt Typhoon cyberattacks. These attacks aren’t necessarily targeting an average person’s data, but they can turn your router into a tool to be used in malicious attacks. 

“The individual user who owns the router probably doesn't even know anything about it,” Butler said. “It’s happening in the background without their knowledge, and it's not necessarily affecting them directly in any way that they can notice.” 

In the Salt Typhoon attack, hackers gained access to data from millions of people through their internet providers, aiming to gain access to information from court-authorized wiretaps. It was a particularly bold instance of a tried-and-true hacker approach called “spray and pray”: Find default login credentials and try them on as many connected devices as you can. 

“It can be only one router out of 5,000, but that one can be a bingo,” Sergey Shykevich, a threat intelligence manager at Check Point Research, told me about these types of attacks. “It’s mostly just easy. In many cases, you don't have to be a very sophisticated actor, or even nation-state, in order to be successful.”

How you can secure your router right now 

It's just as easy for hackers to gain access through a router’s default credentials as it is for you to change your own settings. Most routers have an app that lets you update your login credentials from there, but you can also type your router’s IP address into a URL. These are different from your Wi-Fi name and password, which should also be changed every six months or so. It’s also a good idea to keep your firmware updated, which you can do automatically in your router’s settings or by manually downloading updates in your router’s app or web portal.

When will we know more?

I wish I could point to another time when the FCC ordered a blanket ban on an entire category of consumer products, but nothing like this has happened before. Manufacturers can apply for “Conditional Approval,” and they are likely scrambling behind the scenes to make the cut. When I reached out to the FCC for more clarity on the order, I was referred to the commission's "Covered List" FAQ page.

My best guess is that we’ll learn more specifics on which companies are banned in the next month or so -- an estimate that was echoed by two industry observers I spoke with. But the wait could be even longer. Budington told me he thinks router companies might wait until the ban is lifted rather than hustle to try to move their entire supply chains to the US. 

No matter how it shakes out, we’ll likely look back on this as the most chaotic chapter of the router ban story. Unless you need a new router immediately, there’s a good chance you’ll be able to make a more informed decision a month from now. 

Trump Phone Reportedly Costs More, Looks Different, Isn't Made in America

When The Verge saw a model unit of the T1, the specs and pricing didn't match up with what's still being advertised on the Trump Mobile website.

Headshot of Corinne Reichert
Headshot of Corinne Reichert
Corinne Reichert Senior Editor
Corinne Reichert (she/her) grew up in Sydney, Australia and moved to California in 2019. She holds degrees in law and communications, and currently writes news, analysis and features for CNET across the topics of electric vehicles, broadband networks, mobile devices, big tech, artificial intelligence, home technology and entertainment. In her spare time, she watches soccer games and F1 races, and goes to Disneyland as often as possible.
Expertise News | Mobile | Broadband | 5G | Home tech | Streaming services | Entertainment | AI | Policy | Business | Politics Credentials
  • I've been covering technology and mobile for 12 years, first as a telecommunications reporter and assistant editor at ZDNet in Australia, then as CNET's West Coast head of breaking news, and now in the Thought Leadership team.
Corinne Reichert
3 min read
Trump Mobile phone

The T1 model shown to The Verge this week doesn't look like the T1 phone shown on the Trump Mobile page.

Trump Organization in gold

Trump Mobile executives last month showed off a handset they said was a near-production version of the T1 phone to The Verge. Among other appearance changes, the smartphone had a completely different camera array design than the one still shown on the T1 purchase page.

The Verge said it spoke via video call with two Trump Mobile executives, who held up the phone so it could be seen. The interview follows doubts about whether the phone will ever be released, after its second advertised launch date of the end of 2025 came and went without any status updates. 

Trump Mobile has not responded to repeated requests for comment.

The Verge this week also uncovered documentation from the Federal Communications Commission authorizing what appears to be the T1 phone. The FCC documents show that a phone from Smart Gadgets Global -- whose CEO is listed as Eric Thomas, a Trump Mobile executive -- was certified by the FCC in January. The Smart Gadgets Global website is mostly empty, apart from some stock images of technology. The AI chatbot on the site could not provide any information on the T1 phone. We submitted a question to a human via the chatbot, and are waiting to hear back.

As of March 27, the phone's web page still lists it as being released "later this year," which is the same thing it said last year.

Trump Mobile launched in June 2025 with a $47.45-a-month mobile phone plan, and currently sells refurbished Apple and Samsung phones ranging from $369 to $629. 

The Trump phone, initially announced to be made in the US, was supposed to launch in August 2025. But when it became obvious that domestic large-scale smartphone manufacturing would not be possible, Trump Mobile dropped the "made in the US" claim. Now, the site simply calls the phone "Proudly American" without specifying what that means for a device manufactured overseas. 

The Verge reported in February that sellers were eyeing a March release window. However, despite March now being half over, there's still no word on the release of the T1 phone.

The website claims it will have a 6.25-inch punch-hole AMOLED screen, a 50-megapixel main rear camera with two 2-megapixel lenses, a 16-megapixel front-facing camera, a 5,000-mAh battery, a fingerprint sensor, face unlock and 256GB of expandable storage.

According to the model that The Verge saw on a video call, however, the screen looks a little larger and has a waterfall display with curved edges, as well as a vertical camera array. That one will reportedly run on a Qualcomm Snapdragon 7-series processor, feature 512GB of storage and include a 50-megapixel front-facing camera. According to the report, the T1 logo will also disappear before launch, though the phone will keep the American flag imagery.

The site is still accepting $100 deposits on the phone, which it continues to advertise as being $499 total. However, the phone will now reportedly cost more. Those who have already put down the deposit are locked into the $499 total price, but everyone else who wants this golden Trump phone will pay an unknown amount more. It will be under $1,000, the report says. 

According to the Trump Mobile executives speaking to The Verge, the phone has been delayed because the company decided to take its time and skip the "first initial entry-level phone that we were going to kind of introduce and be quick to the market." They told The Verge it's being made in a "favored nation" with "final assembly" in Florida. It's unclear what qualifies another nation as "favored" to handle most of the assembly of the T1 phone. 

You can read the full report on The Verge, including photos of the phone as it currently looks. 

Transparent audience pixel


Hello, there!

We noticed that you’re currently using an ad blocker.

CNET is able to deliver our best-in-class reviews, tips, buying advice and news to you for free with the help of ads.
Please consider supporting our world-class service journalism by removing the ad blocker from your browser.
We appreciate you!
| Contact Admiral support