The FCC says foreign routers are a security risk, but still allows firmware updates to the ones you already own

The FCC added all foreign-made consumer routers to its Covered List in March 2026, but the practical impact today is minimal. Existing routers remain usable, current stock can still be sold, and firmware updates are permitted until March 2027. The ban only blocks new FCC authorizations for models not yet certified. The policy contains notable contradictions: the same manufacturers deemed a national security risk are still allowed to push firmware updates to devices already in homes, the ban targets routers but ignores other foreign-made networked devices like smart plugs and IoT sensors, and the conditional approval process focuses on US manufacturing investment rather than security criteria. Critics argue the broad ban resembles industrial policy more than a targeted cybersecurity measure, and that blocking newer, more secure Wi-Fi 7 routers may push users to keep older, more vulnerable hardware longer.