FCC Bans New Foreign-Made Wi-Fi Routers for National Security

The Federal Communications Commission (FCC) has enacted a sweeping ban on the sale of new Wi-Fi routers manufactured in foreign countries, citing national security concerns. The order, announced late Monday afternoon, stems from a White House determination that foreign-made routers introduce “supply chain vulnerabilities” that could be exploited by hackers and foreign adversaries.

This move goes significantly beyond previous scrutiny focused on individual companies like TP-Link, which has faced criticism over its ties to China. The FCC’s updated “covered list” – a blacklist of telecom equipment deemed a security risk – now encompasses “all consumer-grade routers produced in foreign countries.” While the ban doesn’t affect routers already purchased by consumers, it effectively halts the import and sale of new models not previously authorized by the FCC.

The decision reflects a growing awareness within the US government of the potential for vulnerabilities embedded within the supply chains of critical infrastructure components. According to the FCC, these vulnerabilities could provide “backdoors” for unauthorized access to American homes, businesses, and essential services. The White House determination specifically points to the risk of exploitation by hackers, including those linked to the Chinese state.

The ban’s broad scope is likely to disrupt the US router market, as nearly all routers currently available for purchase are at least partially manufactured outside the country, including those from major brands like TP-Link, Asus, and Netgear. The FCC acknowledges this, stating that a router is considered foreign-made if “any major stage of the process through which the device is made, including manufacturing, assembly, design and development” occurs outside the US.

However, manufacturers aren’t entirely without recourse. The FCC has outlined a pathway for companies to seek exemptions from the Pentagon or the Department of Homeland Security. The application process, detailed in a recently published document, requires vendors to demonstrate why production cannot be based in the US and to present a “detailed, time-bound plan to establish or expand manufacturing in the United States.”

The FCC’s action builds on existing concerns about cybersecurity threats originating from foreign-made technology. The agency highlighted the involvement of foreign-made routers in several recent cyberattacks, including the Volt, Flax, and Salt Typhoon incidents, which targeted critical US infrastructure. These attacks, reportedly linked to China, underscore the potential for malicious actors to leverage vulnerabilities in widely used networking equipment.

Industry reaction has been swift. Netgear, a US-founded and headquartered company, issued a statement commending the Administration and FCC for prioritizing security. The company emphasized its commitment to security-first design and adherence to government regulations, noting that its products are not manufactured in China. TP-Link, while acknowledging the potential impact on the entire industry, expressed confidence in the security of its supply chain and welcomed a comprehensive evaluation of the sector.

The FCC has published a dedicated FAQ to address consumer questions about the ban. This follows a similar approach taken last year regarding foreign-made drones. Consumers can continue to use existing routers, and retailers can still sell previously authorized models. However, the future of the US router market now hinges on manufacturers’ ability to adapt to the new regulations and potentially shift production to domestic facilities.

Looking ahead, the implementation of this ban will be closely watched. The success of the initiative will depend on the FCC’s ability to effectively enforce the regulations, the responsiveness of manufacturers to the exemption process, and the broader impact on the availability and cost of Wi-Fi routers for American consumers. The move signals a broader trend toward increased scrutiny of foreign-made technology and a growing emphasis on securing the nation’s digital infrastructure.