Feds might ban most-popular internet routers for security reasons

By

Product shot of TP-Link AXE5400 router
TP-Link internet routers like the AXE5400 might soon be banned in the United States.
Photo: TP-Link

As federal authorities in the United States investigate China-based TP-Link over national security risks, a ban of the most widely used home and small business internet routers in this country becomes a possibility, according to a new report Wednesday. Any ban would most likely come under the new Trump administration

TP-Link internet routers face possible U.S. ban

Multiple U.S. government departments, including Commerce, Defense and Justice, have launched investigations into the Chinese company, according to The Wall Street Journal. TP-Link currently controls about 65% of the American router market for homes and small businesses. It also produces smart lights, smart plugs and other gear.

The scrutiny comes after a Microsoft report in October revealed Chinese hackers exploit a large network of compromised devices, primarily consisting of thousands of TP-Link routers. That lets them launch cyberattacks against Western targets. These attacks have targeted think tanks, government organizations, NGOs and Defense Department suppliers.

Unaddressed security flaws

Security experts have raised concerns about TP-Link’s practices, noting that their routers often ship with security flaws that remain unaddressed. Critics say the company remains unresponsive to security researchers who attempt to report vulnerabilities.

TP-Link’s market dominance has grown significantly since the Covid-19 pandemic, rising from roughly 20% in 2019 to its current 65% share. The company partners with more than 300 U.S. internet providers. And it supplies routers to various federal agencies, including NASA, the Defense Department and the Drug Enforcement Administration.

Company defends practices

The company’s California-based unit has defended its practices, stating that it assesses potential security risks and addresses known vulnerabilities.

“We welcome any opportunities to engage with the U.S. government to demonstrate that our security practices are fully in line with industry security standards,” a company spokeswoman said.

Ban would remove lots of equipment

The investigations are part of a broader response to recent Chinese-linked cyberattacks. If implemented, a ban would represent the most significant removal of Chinese telecom equipment from the U.S. since the Trump administration’s 2019 action against Huawei Technologies.

Other countries have already taken action against TP-Link. Taiwan has banned the company’s routers from government and educational facilities, while India issued a warning this year about security risks associated with the devices.

What products might fall under ban?

While specifics of a possible ban remain unclear, such as what happens to consumers’ existing products and whether any new gear can be sold, there are several lines of products associated with TP-Link that might be affected, below.

  • Wi-Fi routers, mesh Wi-Fi systems and range extenders made by TP-Link.
  • Aginet products and services designed for network service providers.
  • Enterprise networking products like Omada for small- and medium-sized businesses, Omada Pro for enterprises and Festa for small businesses and home offices.
  • Vigi cameras and security products for small-and-medium-sized organizations, which TP-Link intends for retail, hotels, schools, restaurants, offices and the like.
  • Unclear if a ban would include TP-Link home solutions in the HomeShield and Tapo lines. Those include smart security cameras, robot vacuums, lights, plugs and sensors.

China critical of investigation

The company, founded in 1996 by brothers Zhao Jianjun and Zhao Jiaxing in Shenzhen, has attempted to distance itself from China amid growing tensions. In October, TP-Link announced plans to establish its headquarters in California, though business records indicate the founding brothers maintain control over all global TP-Link entities.

The Chinese Embassy in Washington has criticized the U.S. investigation, with spokesman Liu Pengyu stating that the U.S. was using national security as a pretext to “suppress Chinese companies.” The potential ban’s decision will likely fall to the incoming Trump administration, which has indicated a tough stance on China.

Industry experts note that while U.S.-based router manufacturers have also been linked to major hacks, the prevalence of unpatched routers and the potential risks of foreign-made network equipment have become increasing concerns for national security officials.

Newsletters

Daily round-ups or a weekly refresher, straight from Cult of Mac to your inbox.

  • The Weekender

    The week's best Apple news, reviews and how-tos from Cult of Mac, every Saturday morning. Our readers say: "Thank you guys for always posting cool stuff" -- Vaughn Nevins. "Very informative" -- Kenly Xavier.