The Federal Communications Commission (FCC) this week added all consumer-grade routers produced in foreign countries to its Covered List, banning their use in the US.
The decision was based on a White House-convened Executive Branch interagency body’s determination (PDF) that all routers made abroad pose a threat to national security.
“Compromised routers can enable in-depth network surveillance, data exfiltration, botnet attacks, and unauthorized access to US government or American businesses’ networks. The United States must have secure and trusted routers,” the determination reads.
According to the document, because most of the routers used in American homes today are produced outside of the US, this market domination “creates unacceptable economic, national security, and cybersecurity risks.”
The determination also mentions attacks by state-sponsored groups such as Flax Typhoon, Salt Typhoon, and Volt Typhoon, which targeted critical communications, energy, transportation, and water infrastructure in the US.
“Routers in the United States must have trusted supply chains so we are not providing foreign actors with potential built-in backdoors to American homes, businesses, critical infrastructure, and emergency services,” the assessment reads.
Based on this determination and on President Trump’s 2025 National Security Strategy, the FCC updated its Covered List with all routers made abroad, pointing out that devices that are currently in use within Americans’ houses are not impacted.
“New devices on the Covered List, such as foreign-made consumer-grade routers, are prohibited from receiving FCC authorization and are therefore prohibited from being imported for use or sale in the U.S. This update to the Covered List does not prohibit the import, sale, or use of any existing device models the FCC previously authorized,” the FCC announced (PDF).
Furthermore, certain router models may be exempt from the ban if they are specifically approved by the Department of War (DoW) or the Department of Homeland Security (DHS).
Per the determination, the DoW or the DHS should notify the FCC that the respective router models have received Conditional Approval (PDF) and do not pose unacceptable risks to national security, and they will continue to receive FCC equipment authorizations.
Supply chain vulnerabilities that could disrupt the US critical infrastructure, economy, and national defense, and severe cybersecurity risks leading to critical infrastructure disruptions or direct harm to US persons are considered unacceptable threats.
Related: DoE Publishes 5-Year Energy Security Plan
Related: Poland Faced a Surge in Cyberattacks in 2025, Including a Major Assault on the Energy Sector
Related: Iran Built a Vast Camera Network to Control Dissent. Israel Turned It Into a Targeting Tool
Related: 3 Men Charged With Conspiring to Smuggle US Artificial Intelligence to China
