The Federal Communications Commission has extended the deadline for security patches on foreign-made Wi-Fi routers to January 1, 2029, easing concerns over the original 2027 cutoff. Despite this, experts caution that the long-term risk of relying on potentially outdated devices remains significant.
- FCC extends security patch waiver on foreign routers from 2027 to 2029
- Netgear and Eero granted temporary exemptions linked to domestic production plans
- Cybersecurity experts warn against buying soon-to-be outdated routers
What happened
The FCC announced on May 8 that foreign-made Wi-Fi routers will continue receiving software and firmware security patches until at least January 1, 2029. This extension follows the commission’s original sweeping ban issued in March 2026, which limited updates for such routers to March 1, 2027. The change reflects significant concerns about service disruptions due to the dominance of foreign-made devices in the US market.
Additionally, manufacturers Netgear and Eero received individual exemptions from the ban, contingent on commitments to onshore their manufacturing processes. Industry voices emphasize the absence of a current domestic supply chain for these routers, prompting temporary relief measures to prevent an abrupt security lapse.
Why it matters
Wi-Fi routers hold a central role in network security as all traffic passes through them, making them prime targets for cyberattacks. The FCC cited connections between foreign-made routers and notable cyberattacks to justify its initial ban. While the extension allows continued security updates, it does not eliminate the risk of eventual product obsolescence as the industry transitions to domestic manufacturing.
Because routers cannot receive security fixes indefinitely under current policies, customers who purchase new devices may face vulnerabilities once update support ends. This uncertainty complicates consumer decisions and raises concerns about long-term network safety in residential and small business settings.
What to watch next
The FCC intends to pursue rulemaking to potentially codify this waiver permanently, which includes a public comment period before final decisions. Monitoring this regulatory process will be critical for consumers and industry stakeholders seeking clarity on hardware support timelines.
In parallel, watching the progress of domestic manufacturing initiatives by companies like Netgear and Eero is key, as these efforts directly impact the availability and security of compliant routers. Consumers should remain vigilant and may prefer to delay new purchases until the regulatory landscape and product support become more stable.