Understanding the U.S. Router Ban: What You Need to Know

You might have heard that the US government has put a ban on foreign-made consumer Wi-Fi routers due to national security concerns. So, what’s the deal?

In the current climate under the Trump administration and FCC chair Brendan Carr, things are a bit chaotic. But don’t worry, your router isn’t going anywhere. The FCC has made it clear that you can continue using your existing router, regardless of its origin. You can even buy a replacement, as long as it was previously authorized.

What about those “vulnerable” routers? Should you be worried? Not really. The FCC states that if you’re using a router in your home or small office, you don’t need to take any action. There are no restrictions on existing routers.

As for government use, the FCC has confirmed that agencies can still use these routers. In fact, the Department of Defense and NASA have purchased equipment from companies that have raised concerns, like TP-Link, which still holds a significant share of the US consumer router market.

So, how serious is this threat? A document claims that hackers have launched direct attacks on American civilians, stolen intellectual property, and created botnets to disrupt communications. It also mentions that foreign-made routers were involved in significant cyberattacks targeting critical infrastructure.

But if there’s no recall or fix for existing routers, what’s the government really doing? They’re banning future routers that haven’t even been made yet.

Confused? That’s understandable. The FCC is preventing new, unannounced foreign-made consumer routers from entering the US unless they decide to make exceptions. The idea is that we’d be safer with routers made domestically, but there’s no indication that the government plans to audit the security of new routers before allowing them in.

Can you buy American-made routers? Well, the FCC isn’t banning routers from foreign companies; it’s banning those made in foreign countries. Most US brands manufacture their routers overseas, so this affects nearly all routers on the market. Even companies like Starlink, which claims to make routers in the US, also produce hardware in other countries.

What about routers designed in Asia but made in the US? The FCC considers a router foreign if any major development stage occurred abroad, including design or assembly. However, just having foreign-made components doesn’t automatically classify a router as foreign unless it includes a “modular transmitter,” a new rule that allows the FCC to target products with radios from companies deemed a security risk.

Does the FCC have proof that foreign routers are more vulnerable? Not really. The National Security Determination claims that foreign-produced routers pose additional risks, but it’s hard to provide evidence of those risks since domestic consumer routers are largely nonexistent. The document doesn’t include any comparisons to support its claims.

Are foreign routers inherently more vulnerable? The FCC doesn’t provide evidence for that either. While they reference incidents involving Chinese hackers, those attacks have also affected US-made products.

So, when the government says “foreign routers are a security risk,” it’s essentially saying “routers are a security risk.”

What about the possibility of backdoors for spying in US-designed routers made by Chinese manufacturers? It’s a risk, but the bigger issue often lies with lax telecom companies. A veteran telecom reporter pointed out that many security breaches stem from a lack of oversight and regulation, with companies neglecting basic security practices like changing default passwords.

There are also concerns about companies not informing consumers when they stop updating routers, leaving them vulnerable. It’s like buying milk without an expiration date—your router won’t give you any warning when it’s no longer secure.

I’ve heard the FCC might stop companies from issuing security updates to routers after March 1, 2027. What’s going on with that? It’s a bit odd. The FCC has announced a waiver allowing existing routers to receive updates until that date, but companies don’t need to file documents for those updates, so there’s nothing the FCC would be blocking unless the updates change the radios’ performance.

How can the FCC ban routers? No device with a radio can be imported or sold in the US without FCC authorization. This usually involves checking for harmful interference or radiation. However, a mechanism called the “covered list” was created in 2019 to target consumer products like routers, allowing the government to ban any gear deemed a national security risk.

Is the ban limited to consumer routers? It could potentially affect all sorts of devices, as the FCC defines consumer-grade routers broadly. This could include anything that forwards data packets, which means it might cover your entire home network setup.

So, is that it? No more new home routers in the US? Router companies have two options: they can stop shipping new routers to the US while still selling older models, or they can apply for “conditional approval” to keep getting new products cleared.

What if you buy a newer router in Canada and bring it back? The FCC says no, but enforcing that could be tricky.

Will the FCC require improved security for conditional approval? Nope! While companies must answer a long list of questions, none of them pertain to security measures against hacks. The focus seems to be solely on where the device is made and assembled, rather than its security features.

If it’s not about security, why is this happening? The Trump administration’s goal appears to be bringing back US manufacturing and creating jobs, but it also looks like a way to leverage national security claims for economic gain. This approach has been used before to extract tariffs and fees, and it raises questions about the credibility of the motives behind these regulations.

Are router makers ready to invest in US manufacturing? That’s the big question. Netgear’s spokesperson praised the FCC’s actions as a step toward a safer digital future, but it’s unclear if they’ll actually invest in US manufacturing.

TP-Link, a major player in the US router market, acknowledged that most routers are made outside the US and expressed confidence in their supply chain security. However, they didn’t respond when asked about plans for US manufacturing.

Other companies like Amazon (Eero), Asus, Google (Nest), and Ubiquiti (Unifi, Amplifi) also didn’t provide comments.