The Router in Your Home May Be a National Security Risk

There is a small box in your home, probably tucked behind a bookshelf or sitting on a counter that every phone, laptop, smart TV, and security camera in your house connects through. It is your Wi-Fi router, and for most of us, it has been quietly doing its job for years without a second thought.

On March 23, 2026, the federal government started paying a great deal of attention to that box.

The Federal Communications Commission made a sweeping and largely unprecedented move: it added all consumer-grade routers manufactured in foreign countries to its official Covered List — a register of communications equipment deemed to pose an unacceptable risk to U.S. national security. The decision, which followed a formal determination by a White House-convened interagency national security body, effectively bans new models of foreign-made home routers from receiving the FCC authorization required to be imported or sold in the United States.

Why Routers? Why Now?

The FCC’s concern is not abstract. From disrupting network connectivity to enabling local networking espionage and intellectual property theft, foreign-produced routers present serious risks to Americans. Routers produced abroad were directly implicated in the Volt, Flax, and Salt Typhoon cyberattacks, which targeted critical American communications, energy, transportation, and water infrastructure.¹

The logic is straightforward: whoever controls your router controls all the traffic passing through it. A compromised router can spy on your browsing, intercept your passwords, redirect your banking sessions, or be silently recruited into a botnet — all without you ever knowing. (Readers may recall Dr. Tom’s previous column on the WebStresser and ExoStresser botnets, which used exactly this kind of hijacked network infrastructure to carry out massive attacks.)

China is said to command around 60% of the market for consumer routers.² That dominance is precisely what spooked national security officials.

What This Actually Means — And What It Doesn’t

Before anyone rushes to throw their router out the window, let’s be clear about what this ruling does and does not do.

What it does: New models of devices on the Covered List are prohibited from receiving FCC authorization and are therefore prohibited from being imported or sold in the U.S.³ Foreign router makers who want to sell new models in America must now apply for a “Conditional Approval” from the Department of Homeland Security or Department of Defense — a much more rigorous vetting process.

What it does not do: The Covered List does not restrict the continued use by consumers of previously-purchased devices. Consumers can continue to use the devices they lawfully purchased.³ Retailers can also continue selling existing inventory of previously authorized models.

In short — your current router is fine. The ruling applies only to brand-new models seeking new FCC authorization going forward.

The Problem: Nearly Every Router Is Made Overseas

Here is where things get complicated. Virtually all consumer routers are made outside the U.S. — primarily in China, Indonesia, Taiwan, Thailand, or Vietnam. The only U.S.-made routers currently known are those from Starlink, which says its newer units are manufactured in Texas.¹

That means the ruling puts almost every major brand Americans know and trust squarely in the crosshairs. According to Speedtest Intelligence data collected by Ookla from January 2025 through March 2026, the U.S. router market is dominated by Eero at 10%, TP-Link at 9.9%, Netgear at 9.6%, Arcadyan at 8.9%, Asustek at 4.8%, and Google at 2.8%, among others — many of which rely heavily on overseas manufacturing.⁴

Your ISP-provided router is likely affected too. The top router vendors supplied by major ISPs include Arcadyan and Wistron for Verizon; Arris and Technicolor for Comcast; Askey and Sagemcom for Charter; and Humax and Nokia for AT&T.⁴ Nearly all of these are manufactured abroad.

FCC Covered List — Named Companies

The following 12 companies have been individually named on the FCC Covered List under Section 2 of the Secure and Trusted Communications Networks Act. Their equipment and services are prohibited from receiving FCC authorization for import or sale in the United States.

Chinese Telecommunications Companies

Russian Cybersecurity Software

The Broader Categorical Bans (Not Company-Specific)

In addition to the named companies above, the FCC has also added two broad categorical rules that apply regardless of the specific manufacturer:

Foreign-made consumer routers (added March 23, 2026) — All new consumer-grade routers produced in any foreign country are banned from receiving FCC equipment authorization, unless granted a Conditional Approval by the Department of War or Department of Homeland Security. This means brands like TP-Link, Netgear, ASUS, Eero, and virtually every other major router maker are affected for new models — even though they are not individually named on the list.

Foreign-made drones and UAS components (added December 22, 2025) — All new uncrewed aircraft systems and critical UAS components produced in any foreign country are banned, with limited exemptions. DJI and Autel were the most prominent companies affected.

A note on the router ban: Because the router rule is categorical rather than company-specific, you won’t find “TP-Link” or “ASUS” listed by name on the Covered List itself. The ban simply applies to the country of production — any router manufactured, assembled, designed, or developed outside the U.S. falls under it unless given a Conditional Approval. As of the date of this article, no Conditional Approvals for routers have yet been issued.

An Aging Router Fleet Makes It Worse

The security picture is complicated further by how old many of America’s home routers actually are. Around 28% of Speedtest samples were recorded on Wi-Fi 5, while approximately 7% still rely on Wi-Fi 4 or older standards — generations that lack the advanced security features found in newer equipment, making them more vulnerable to cyber threats.⁴

This creates a genuine dilemma. The government is pushing to eliminate the foreign router pipeline just as millions of Americans are overdue for an upgrade — and the domestic alternatives to replace them barely exist yet.

What Should You Do Right Now?

The practical answer for most Tega Cay Sun readers is: not much needs to change today. Your existing router works, and routers already on store shelves can still be bought and sold. But here are a few smart steps worth taking:

• Check your router’s age. If your home router is more than five years old, it is likely running outdated firmware and missing modern security protections. Now is a good time to consider upgrading while existing inventory is still on shelves.
• Keep your firmware updated. The FCC issued a blanket waiver through at least March 1, 2027, allowing manufacturers to push security patches and functionality updates to previously authorized devices.⁵ Make sure your router’s automatic updates are turned on.
• Consider your ISP’s equipment. If your internet provider supplied your router/modem combo, call and ask whether firmware updates are being applied automatically. Many ISP-provided devices update silently — but it is worth confirming.

The router ban is a significant national security move that will reshape the home networking market over the coming years. For now, the impact on everyday consumers is minimal — but it is a good reminder that the little box in the corner of your living room is a lot more important, and a lot more vulnerable, than it looks.

Stay safe out there, and I’ll see you next week!

Feeling lost in the digital world? Dr. Tom is here to help!

Join Dr. Tom every week in his column, Dr. Tom’s Cyber Bits and Tips, for byte-sized advice on all things cyber and tech. Whether you’re concerned about online safety, curious about the latest cybercrime trends, or simply want to navigate the ever-evolving digital landscape, Dr. Tom has you covered.

From practical cybersecurity tips to insightful breakdowns of current threats, Dr. Tom’s column empowers you to stay informed and protect yourself online. So, dive in and get savvy with the web – with Dr. Tom as your guide!

References

1. Dong Knows Tech. “FCC’s 2026 Router Ban: What’s Banned and What’s Not.” March 25, 2026. https://dongknows.com/fcc-router-ban-officially-in-effect/
2. TechCrunch. “FCC bans import of new consumer routers made overseas, citing security risks.” March 24, 2026. https://techcrunch.com/2026/03/24/fcc-bans-import-of-new-consumer-routers-made-overseas-citing-security-risks/
3. Federal Communications Commission. “FAQs on Recent Updates to FCC Covered List Regarding Routers Produced in Foreign Countries.” March 31, 2026. https://www.fcc.gov/faqs-recent-updates-fcc-covered-list-regarding-routers-produced-foreign-countries
4. TelecomLead / Ookla Speedtest Intelligence. “FCC Router Rules Shake U.S. Market: Ookla Data Reveals Top Vendors and Wi-Fi Upgrade Gap.” April 1, 2026. https://telecomlead.com/broadband/fcc-router-rules-shake-u-s-market-ookla-data-reveals-top-vendors-and-wi-fi-upgrade-gap-125362
5. 5GStore. “FCC Router Ban FAQ: What It Really Means.” March 31, 2026. https://5gstore.com/blog/2026/03/31/fcc-router-ban-faq-what-it-means/
6. Federal Communications Commission. “Fact Sheet: FCC Updates Covered List to Include Foreign-Made Consumer Routers.” March 23, 2026. https://docs.fcc.gov/public/attachments/DOC-420034A1.pdf