Technologies

Controversy Brews: US Government Targets Banning Top Wi-Fi Router

Federal departments and agencies are joining forces in an effort to ban TP-Link routers due to concerns about national security risks.

TP-Link routers might not be available for much longer in the US, according to a Washington Post report last week. A potential ban is looking increasingly likely, as more than half a dozen federal departments and agencies back the proposal,

The news first broke in December of last year, when The Wall Street Journal reported that investigators at the Departments of Commerce, Defense and Justice had all opened probes into the company due to national security risks stemming from its ties to China. Since then, news on the TP-Link front has been relatively quiet.

Now, the proposal has gained interagency approval.

Read more: I Asked 4 Cybersecurity Experts If They Would Still Use a TP-Link Router

Why are plans to ban TP-Link routers being pushed?

“Commerce officials concluded TP-Link Systems products pose a risk because the US-based company’s products handle sensitive American data and because the officials believe it remains subject to jurisdiction or influence by the Chinese government,” the Washington Post reported.

TP-Link’s ties to the Chinese government are only allegations. The company — technically called TP-Link Systems — has strenuously denied to me in the past that it’s a Chinese company.

“As an independent US company, no foreign country or government, including China, has access to or control over the design and production of our products,” a TP-Link spokesperson told CNET.

The history of the TP-Link routers

TP-Link was founded in Shenzhen, China, in 1996 by two brothers, Jeffrey (Jianjun) Chao and Jiaxing Zhao. In October 2024, two months after members of the House Select Committee called for an investigation into TP-Link routers, the company split into two: TP-Link Technologies and TP-Link Systems.

The latter is headquartered in Irvine, California, and has approximately 500 employees in the US and 11,000 in China, according to the Washington Post report. TP-Link Systems is owned by Chao and his wife.

“TP-Link’s unusual degree of vulnerabilities and required compliance with [Chinese] law are in and of themselves disconcerting,” the lawmakers wrote in October 2024. “When combined with the [Chinese] government’s common use of [home office] routers like TP-Link to perpetrate extensive cyberattacks in the United States, it becomes significantly alarming.”

The company has become a dominant force in the US router market since the pandemic. According to the Journal report, it grew from 20% of total router sales in 2019 to around 65% this year. TP-Link disputed these numbers to CNET, and a separate analysis from the IT platform Lansweeper found that 12% of home routers currently used in the US are made by TP-Link. More than 300 internet providers issue TP-Link routers to their customers, according to the Wall Street Journal report.

Why are TP-Link routers being investigated?

Separately, the Department of Justice’s antitrust division is investigating whether TP-Link engaged in predatory pricing tactics by artificially lowering its prices to muscle out competitors.

CNET has several TP-Link models on our lists of the best Wi-Fi routers and will monitor this story closely to see if we need to reevaluate those choices.

“We do not sell products below cost. Our pricing is not only above cost but contributes a healthy profit to the business,” a TP-Link spokesperson told CNET.

The potential ban has been through an interagency review and is currently in the hands of the Department of Commerce. According to the Washington Post report, sources familiar with the details of the ban said the Trump administration’s ongoing negotiations with China have made the chances of a ban less likely in the near future.

“Any concerns the government may have about TP-Link are fully resolvable by a common-sense mix of measures like onshoring development functions, investing in cybersecurity, and being transparent,” the spokesperson said. “TP-Link will continue to work with the US Department of Commerce to ensure we understand and can respond to any concerns the government has.”

Don’t miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source.

How worried should you be about your TP-Link router?

I wrote a few months ago that I wasn’t in any rush to replace my own TP-Link router, and that’s essentially how I still feel today.

When the news first broke last December, I asked four cybersecurity experts whether they would still use a TP-Link router. One gave a strong “no.” Another said there is “risk for a consumer.” And two declined to answer the question directly.

Itay Cohen was one of the authors of a 2023 report that identified a firmware implant in TP-Link routers linked to a Chinese state-sponsored hacking group. He told me in a previous interview that similar implants have been found on other router brands manufactured all over the world.

“I don’t think there’s enough public evidence to support avoiding routers from China outright,” Cohen said. “The vulnerabilities and risks associated with routers are largely systemic and apply to a wide range of brands, including those manufactured in the US.”

I heard a version of that from every cybersecurity expert I spoke with. TP-Link has security flaws, but so do all routers, and I couldn’t point to any that showed collaboration with the Chinese government specifically.

“We’ve analyzed an astonishing amount of TP-Link firmware. We find stuff, but we find stuff in everything,” said Thomas Pace, CEO of cybersecurity firm NetRise and former security contractor for the Department of Energy.

That said, it’s entirely possible that the government is aware of vulnerabilities that the public is not.

For now, I’m still comfortable using a TP-Link router knowing I follow some basic best practices for network security, but my risk tolerance may be higher than it is for others.

How to protect your network if you have a TP-Link router

If you’re one of the millions of Americans who uses a TP-Link router, the news of a potential ban might be unnerving.

A Microsoft report from last year found that TP-Link routers have been used in “password spray attacks” since August 2023, which typically occur when the router is using a default password.

Here’s what you can do to protect yourself right now:

Update your login credentials. A shocking amount of router attacks occur because the user never changed the default login credentials set by the router manufacturer. Most routers have an app that lets you update your login credentials, but you can also type your router’s IP address into a URL. These credentials are different from your Wi-Fi name and password, which should also be changed every six months or so. As always with passwords, avoid common words and character combinations, longer passwords are better and don’t reuse passwords from other accounts.

Use a VPN. If you’re worried about prying eyes from the Chinese government or anyone else, the single best thing you can do to ensure your connection remains private is to use a quality VPN. Privacy-minded folks should look for advanced features like obfuscation, Tor over VPN and a double VPN, which uses a second VPN server for an added layer of encryption. You can even install a VPN on your router directly so that all your traffic is encrypted automatically.

Turn on the firewall and Wi-Fi encryption. These are typically on by default, but now is a good time to make sure they’re activated. This will make it harder for hackers to access the data sent between your router and the devices that connect to it. You can also find these settings by logging into your router from its app or website.

Consider buying a new router. I always recommend buying your own router instead of renting one from your internet service provider. This is mostly a cost-saving measure, but if your ISP uses TP-Link equipment, now might be a good time to switch to another brand. The main thing to look for is WPA3 certification — the most up-to-date security protocol for routers.

Update your firmware. TP-Link’s spokesperson told me last year that customers should regularly check for firmware updates to keep their router secure. “To do this, customers with TP-Link Cloud accounts may simply click the ‘Check for Updates’ button in their product’s firmware menu,” the spokesperson said. “All other customers can find the latest firmware on their product’s Downloads page on TP-Link.com.”

Technologies

Anthropic warns investors of AI’s ‘existential risk to humanity’ in IPO prospectus, reports say

Anthropic’s IPO filing dedicates 80 pages to the risks of AI, nearly double the 48 pages it spends discussing its business plans, according to Reuters.

Your Privacy

On this service, we and our vendors use cookies and other tools (“Cookies”) to store and access information on your device, such as device identifiers, IP address, and your browser type. Your data may be used to save and communicate your privacy choices; ensure security, prevent fraud, and debug our products and services; personalize advertising and content; for advertising and content measurement; to conduct audience research and services development; so we can improve our services and develop new ones; to match and combine offline data with your online activity; and for social features. We may share this data with select vendors with your consent. You can adjust your choices any time through the “Cookie Preferences” link in the footer of relevant Versant sites or in-app settings.

We will also use other Cookies that are essential or related to our services, including for security and fraud prevention. To learn more about some of our vendors, see the IAB and Google Vendors under each purpose. Visit our Cookie Notice and Privacy Policy to learn more.

These Cookies and SDKs are required for Service functionality, including security and fraud prevention, and to enable any purchasing capabilities. You can set your browser to block these tracking technologies, but some parts of the site may not function properly.

The choices you make regarding the purposes and entities listed in this notice are saved and made available to those entities in the form of digital signals (such as a string of characters). This is necessary in order to enable both this service and those entities to respect such choices.

Your data can be used to monitor for and prevent unusual and possibly fraudulent activity (for example, regarding advertising, ad clicks by bots), and ensure systems and processes work properly and securely. It can also be used to correct any problems you, the publisher or the advertiser may encounter in the delivery of content and ads and in your interaction with them.

Certain information (like an IP address or device capabilities) is used to ensure the technical compatibility of the content or advertising, and to facilitate the transmission of the content or ad to your device.

Cookies, device or similar online identifiers (e.g. login-based identifiers, randomly assigned identifiers, network based identifiers) together with other information (e.g. browser type and information, language, screen size, supported technologies etc.) can be stored or read on your device to recognise it each time it connects to an app or to a website, for one or several of the purposes presented here.

– Use limited data to select advertising 791 partners can use this purpose Advertising presented to you on this service can be based on limited data, such as the website or app you are using, your non-precise location, your device type or which content you are (or have been) interacting with (for example, to limit the number of times an ad is presented to you).

– Create profiles for personalised advertising 637 partners can use this purpose Information about your activity on this service (such as forms you submit, content you look at) can be stored and combined with other information about you (for example, information from your previous activity on this service and other websites or apps) or similar users. This is then used to build or improve a profile about you (that might include possible interests and personal aspects). Your profile can be used (also later) to present advertising that appears more relevant based on your possible interests by this and other entities.

– Use profiles to select personalised advertising 640 partners can use this purpose Advertising presented to you on this service can be based on your advertising profiles, which can reflect your activity on this service or other websites or apps (like the forms you submit, content you look at), possible interests and personal aspects.

– Create profiles to personalise content 261 partners can use this purpose Information about your activity on this service (for instance, forms you submit, non-advertising content you look at) can be stored and combined with other information about you (such as your previous activity on this service or other websites or apps) or similar users. This is then used to build or improve a profile about you (which might for example include possible interests and personal aspects). Your profile can be used (also later) to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests.

– Use profiles to select personalised content 234 partners can use this purpose Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services (for instance, the forms you submit, content you look at), possible interests and personal aspects. This can for example be used to adapt the order in which content is shown to you, so that it is even easier for you to find (non-advertising) content that matches your interests.

– Measure advertising performance 916 partners can use this purpose Information regarding which advertising is presented to you and how you interact with it can be used to determine how well an advert has worked for you or other users and whether the goals of the advertising were reached. For instance, whether you saw an ad, whether you clicked on it, whether it led you to buy a product or visit a website, etc. This is very helpful to understand the relevance of advertising campaigns.

– Measure content performance 405 partners can use this purpose Information regarding which content is presented to you and how you interact with it can be used to determine whether the (non-advertising) content e.g. reached its intended audience and matched your interests. For instance, whether you read an article, watch a video, listen to a podcast or look at a product description, how long you spent on this service and the web pages you visit etc. This is very helpful to understand the relevance of (non-advertising) content that is shown to you.

– Understand audiences through statistics or combinations of data from different sources 579 partners can use this purpose Reports can be generated based on the combination of data sets (like user profiles, statistics, market research, analytics data) regarding your interactions and those of other users with advertising or (non-advertising) content to identify common characteristics (for instance, to determine which target audiences are more receptive to an ad campaign or to certain contents).

– Develop and improve services 688 partners can use this purpose Information about your activity on this service, such as your interaction with ads or content, can be very helpful to improve products and services and to build new products and services based on user interactions, the type of audience, etc. This specific purpose does not include the development or improvement of user profiles and identifiers.

– Use limited data to select content 180 partners can use this purpose Content presented to you on this service can be based on limited data, such as the website or app you are using, your non-precise location, your device type, or which content you are (or have been) interacting with (for example, to limit the number of times a video or an article is presented to you).

These Cookies and SDKs are used to collect data about your browsing habits, use of the Services, your preferences, and your interaction with advertisements across platforms and devices for the purpose of delivering targeted advertising content, both on our Services and on third party sites. Third-party sites and services also use Targeting Cookies to deliver content, including advertisements relevant to your interests on the Services. If you reject these Cookies or SDKs, you will see less relevant advertising.

Data collected under this category through Cookies and SDKs can also be used to select and deliver personalized content, such as news articles and videos.

Technologies

U.S., Iran hold separate mediator talks as Mideast oil exports hit war-time high

Iranian and U.S. officials reportedly met separately with mediators Monday to push for a ceasefire, as Middle Eastern crude exports rebounded to war-time high.

Iranian and U.S. officials reportedly met separately with mediators Monday to push for a ceasefire.

Middle Eastern crude exports rebounded this month to around their highest level since the war began in February.

An outright export ban by Washington on diesel would keep roughly 1.2 million barrels a day at home, and risks overwhelming Gulf Coast storage, according to Kpler.

The building of the destroyed Shajareh Tayebeh primary school is pictured surrounded by rubble in Minab in Iran’s Hormozgan province on August 10, 2026. Six months on, a team of AFP journalists obtained rare access to the school which has remained largely in ruins, its collapsed walls and twisted steel now surrounded by portraits of the children killed as Iranian flags flutter above the rubble. Iran says the attack on the school involved two separate US Tomahawk missiles but neither the United States nor Israel has officially claimed responsibility for the strike. (Photo by ATTA KENARE / AFP via Getty Images) /

Atta Kenare | Afp | Getty Images

U.S. and Iranian officials have reportedly held separate indirect talks with mediators on Monday, reviving efforts to end seven months of war as Tehran presses for a response to a revised ceasefire framework and Middle East crude exports climb to their highest level since the conflict began.

Iranian Foreign Minister Abbas Araghchi met Qatari mediators in New York, where he remained after the United Nations General Assembly, and reportedly said he expects Washington’s reply by Tuesday. “We talked about ideas and how to find solutions to fulfil Iran’s conditions,” Araghchi said, adding that he planned to return to Tehran once a response arrives. “Whenever the Qataris have a response, they know how to get it to us.”

Iran’s proposal, first presented on the sidelines of last week’s General Assembly, calls for a four- to five-day U.S. timeline to release frozen Iranian funds, lift sanctions on Iranian oil and end the naval blockade of Iranian ports, with nuclear talks beginning within seven days. Tehran has tied any reopening of the Strait of Hormuz to those steps.

President Donald Trump had on Sunday called the plan “unacceptable” and rejected it, telling reporters Iran wants a swift deal because of the economic pressure it is under. Speaking at the White House Monday, Trump said U.S. officials had spoken separately with mediators but gave no further details, adding: “We’re going to win. It’s going to go pretty quickly.”

The diplomatic push comes as physical supply data shows the war’s toll on the oil market easing. Middle Eastern crude exports rebounded this month to around their highest level since the war began in February, Kpler data showed. “Middle East crude exports at just under 80% of pre-conflict levels,” the tracking firm said in a note on Monday.

The Strait of Hormuz itself remains far from normal. Kpler’s real-time tracking showed total clearance through the strait at 10,591 kilobarrels a day on Saturday, against a pre-war baseline of 17,133.

Technologies

Oil prices fall as crude exports recover at Saudi Arabia’s Red Sea ports

Saudi Arabia has restored flows through the pipeline to around 3.5 million barrels per day, according to media reports.

Your Privacy

Data collected under this category through Cookies and SDKs can also be used to select and deliver personalized content, such as news articles and videos.