Breaking FCC restrictions on foreign-made routers is not legally permitted, but waivers and exemptions exist for certain devices to maintain functionality and security.Overview of FCC Restrictions
In March 2026, the FCC enacted a ban on importing and selling new consumer-grade routers manufactured outside the U.S., citing national security risks and vulnerabilities exploited in cyberattacks such as Volt, Flax, and Salt Typhoon . These devices were added to the FCC's Covered List, preventing new models from receiving FCC equipment authorization, which is required for sale or import in the U.S. . The ban primarily targets routers with foreign components, including those from China, Thailand, and South Korea, due to concerns over espionage, network disruption, and critical infrastructure threats .
Waivers and Exemptions
The FCC has granted waivers to certain broadband providers (e.g., Comcast, Charter, Cox) allowing them to substitute components or update memory in existing router designs without repeating the certification process . This ensures that existing devices can continue to be manufactured, imported, leased, and updated safely. Additionally, the FCC extended waivers to allow software and firmware updates for existing foreign-made routers until at least January 1, 2029, preventing devices from becoming unpatched and vulnerable . Conditional approvals are also available for devices deemed low-risk by the Department of Homeland Security or Department of War .
Legal and Practical Considerations
- Modifying routers to bypass FCC rules is illegal and could result in fines or criminal liability.
- Existing routers that were previously authorized can continue to be used, sold, and updated under the current waivers .
- Component substitutions or firmware updates must comply with FCC waivers; unauthorized changes are prohibited .
- Security remains critical: even legally compliant routers must be patched regularly to prevent exploitation .
Safe Alternatives
- Use FCC-approved routers: Ensure any new device is certified and not on the Covered List.
- Leverage ISP-provided gateways: Many ISPs provide routers that are compliant and updated automatically.
- Apply for Conditional Approval: Manufacturers can submit applications to the FCC for devices that meet security standards .
- Maintain firmware updates: Keep existing routers patched to avoid vulnerabilities, even if they are foreign-made and covered by waivers .
Key Takeaway
While circumventing FCC restrictions is illegal, the FCC has implemented waivers and conditional approvals to allow continued use, updates, and component substitutions for existing routers. Users and providers should focus on compliance, security, and authorized updates rather than attempting to bypass regulations, ensuring both legal operation and network safety.
