FCC Extends Router Update Waiver Until 2029 for Security Patches

router software updates - FCC Extends Router Update Waiver Until 2029 for Security Patches
BURBANK, CALIFORNIA - MARCH 24: Eero wireless routers are displayed at a Best Buy store on March 24, 2026 in Burbank, California. The U.S. Federal Communications Commission (FCC) announced it is banning the import of all new foreign-made consumer routers in the latest crackdown on Chinese-made electronic gear over security concerns. China is estimated to control at least 60% of the U.S. market for home internet routers that connect computers, phones, and smart devices to the internet. The FCC order does not affect existing models but will ban the import and sale of new ones. (Photo by Justin Sullivan/Getty Images)

FCC Extends Update Policy for Foreign Routers

The Federal Communications Commission (FCC) has announced an extension allowing router software updates for foreign-made devices through January 1, 2029. This move provides relief to consumers and manufacturers following recent restrictions that limited updates for routers and certain drones deemed potential security risks. The focus on router software updates comes as part of a broader set of rules intended to protect national security while balancing public interest and device functionality.

Background: The Foreign Router Ban and Its Impact

Earlier this year, the FCC introduced sweeping regulations that banned the approval of new consumer-grade routers manufactured outside the United States. The rules, motivated by national security concerns, affected virtually all major router makers, with only a few companies such as Starlink being mostly exempt. While the ban targets new hardware, it also included a critical deadline for software and firmware updates on already approved devices, initially set for March 1, 2027. This raised concerns among consumers and manufacturers about the security and longevity of existing devices.

In response to industry feedback, the FCC’s latest waiver extends the cutoff for router software updates to January 1, 2029. The agency also broadened the waiver to cover a wider array of software and firmware updates, not just security patches, ensuring that essential updates continue to reach consumers’ devices.

Waiver Details: What Devices Are Covered?

The updated policy applies to both foreign-manufactured routers and drones that have been added to the FCC’s Covered List—a list of devices that the agency considers to pose unacceptable national security risks. According to the FCC’s Office of Engineering and Technology, the waiver allows all previously authorized uncrewed aircraft systems (UAS), critical drone components, and foreign-made routers to receive software and firmware updates through at least the start of 2029.

The waiver specifically includes all updates that maintain the functionality and security of these devices, such as vulnerability patches and compatibility enhancements with other operating systems. It also now covers both “Class I” and “Class II permissive changes,” with Class I referring to modifications that do not degrade reported performance and Class II to minor changes that may slightly impact performance but not compliance. The FCC clarified that updates under these classes are vital for consumer safety and device reliability.

Path to Permanency and Public Input

While the extension is currently a temporary measure, the FCC’s engineering office has indicated a recommendation for making the waiver permanent via a formal rulemaking process. This would allow public comments and greater transparency, as opposed to the original hardware ban, which was enacted without public consultation. Making the router software updates waiver permanent could set a new precedent for how security and functionality are maintained in imported devices subject to national security scrutiny.

Industry Reactions and Ongoing Challenges

The extension has been welcomed by many in the technology sector, as it alleviates immediate concerns over device obsolescence and user security. However, major router manufacturers still face challenges obtaining exemptions required for importing new models into the US. Companies must prove to the Department of Defense or the Department of Homeland Security that their devices do not pose unacceptable security risks. The process appears especially difficult for Chinese-origin companies like TP-Link, which, despite relocating its headquarters to the US, is still seeking an exemption amid heightened scrutiny.

Other companies, such as Netgear and Eero (owned by Amazon), have successfully obtained exemptions, giving them a temporary advantage in the US market. The FCC’s guidance also clarified that the ban includes portable hotspots but excludes smartphones with built-in hotspot features.

Looking Ahead: Security, Updates, and Consumer Protection

By extending the waiver for router software updates, the FCC aims to provide stability for both manufacturers and end-users while it considers long-term policy changes. This decision reduces the risk of leaving millions of devices vulnerable to security threats due to lack of updates. As the FCC moves toward potentially codifying this waiver, stakeholders across the industry will be watching closely to see how national security priorities are balanced with technological innovation and user safety.

Router software updates remain a critical issue for consumers and manufacturers alike, as secure and up-to-date devices are essential in today’s connected world. The FCC’s move to extend update eligibility through 2029 offers a measure of assurance, but the ongoing debate over foreign technology and national security is far from settled.


This article is inspired by content from Original Source. It has been rephrased for originality. Images are credited to the original source.

Subscribe to our Newsletter