The short version
- Replace on evidence, not age. Four things justify a new router: its maker no longer ships security updates for it; its internet port is slower than your plan; your devices can use a band or generation it lacks, and you'd notice the difference; or it lacks WPA3 or a feature you need.
- Age is a poor guide. ASUS lists Wi-Fi 6 routers such as the RT-AX86U and RT-AX88U as end-of-life, while eero promises security updates for its Wi-Fi 6 eero 6 through at least October 31, 2031. Look up your model; don't guess from the year.
- Many problems aren't the router. A slow plan or provider line, a router in a cabinet, thick walls, an old phone and bufferbloat all survive a router swap. Test wired at the router first.
- The FCC's 2026 router action doesn't require you to replace anything. The FCC says people using routers affected by its Covered List action "do not need to do anything", and an FCC waiver lets makers keep sending previously authorized routers software and firmware updates, such as security patches, until at least January 1, 2029.
The checklist
Work down the list. Any "replace" answer is a reason on its own; the rest of the article explains each check and how to run it.
| Check | How to find out | Replace if |
|---|---|---|
| Security updates | Your model and hardware version on the maker's end-of-life or support list (table below) | The maker says it no longer ships security updates for it |
| Internet port vs plan | The router's spec page; the WAN status page shows the speed it connected at | Your plan is faster than about 940 Mbps and the internet port is 1 Gbps |
| LAN port vs your fastest wired device | The router's spec page | One wired device needs more than about 940 Mbps from the internet and no LAN port is faster than 1 Gbps (a switch can't fix that) |
| Wi-Fi generation vs devices | Your phones' and laptops' spec pages | Devices you rely on have 6 GHz and the router doesn't, or the router is Wi-Fi 5 or older |
| Security options | The router's Wi-Fi security setting | It can't offer WPA3 Personal or WPA2/WPA3 Transitional, even after a firmware update |
| Coverage | Signal and speed tests room by room | Not by itself: weak rooms usually need another access point, not a new router |
Firmware support: what each maker promises
A router that no longer gets security updates is the clearest case for replacing it, because nothing else you do fixes new vulnerabilities. In May 2025 the FBI warned that criminals were taking over end-of-life routers with remote administration turned on, using variants of TheMoon malware, and turning them into proxies that hide other criminals' traffic. Its precautions include replacing an end-of-life router with an updated model if possible, applying any available security patches or firmware updates, and turning off remote management.
Makers publish very different things. From each maker's own pages, checked October 29, 2026:
| Maker | What it publishes | How long updates last |
|---|---|---|
| eero | A dated guarantee for every model it still sells | Security updates for at least five years from purchase new on eero.com or Amazon, or until the listed date if later: October 31, 2031 for the eero 6, 6+, Pro 6E and every Wi-Fi 7 model; March 11, 2030 for the eero Pro. "When software security updates end, your eero device will still work" |
| A minimum per model | At least five years from when Google starts selling it on the US Google Store: October 27, 2027 for the Nest Wifi Pro. Google's table still marks Google Wifi (2016) and Nest Wifi (2019) as "currently receiving critical security updates" after their minimums passed | |
| NETGEAR | An End of Service (EOS) policy, a searchable EOS list, and "(EoS)" labels in its monthly security advisories | "In general, EOS for NETGEAR products occurs three years after the last sale date"; after EOS, products "no longer receive firmware updates, including important security updates" |
| TP-Link | A US list of End of Sales dates by model and hardware version, and a global end-of-life policy | End of Maintenance "is usually 3 years after the EOS date" unless the law requires otherwise; after it, TP-Link "will no longer provide support or maintenance", and the product's functionality "may be limited" |
| Linksys | End-of-life and end-of-support dates, looked up by SKU | After end of life, "Major Security" updates continue; after end of support, no security updates |
| ASUS | An end-of-life list of models "no longer manufactured or updated with firmware"; some entries marked "only EU" | No US dates. ASUS's dated minimums are tied to regional regulations: its consolidated page (updated October 5, 2026) covers the UK and Australia, and a separate page covers Singapore. The list isn't a hard stop: ASUS posted firmware for the listed RT-AX86U and RT-AX88U in April and on October 22, 2026 |
| Ubiquiti | "Vintage" and "Legacy" product lists, without advance dates | Vintage products still get "critical bug fixes and security updates"; Legacy products "have stopped receiving updates" |
| GL.iNet | A policy statement and end-of-life notices | Support "up to TWO YEARS after their last manufacturing date, or longer if required by law" |
How to use it:
- Find the exact model and hardware version on the router's label. TP-Link's US list is by version: Archer AX21 versions 1.20 to 3.6 reached End of Sales between May and November 2024, and the Archer A7 version 5.0 on May 29, 2024. By TP-Link's usual three-year rule, that A7's maintenance would end around May 2027 (our arithmetic; TP-Link may extend it).
- Search the maker's list. NETGEAR's October 2026 security advisory, for example, marks the R7000 and R7000P Nighthawk routers "(EoS)" and says "no security updates are planned" for models so marked; NETGEAR "strongly recommends that you retire these devices". The same entry still lists a fixed firmware version for both, so an end-of-service label and a last patch can arrive together. Ubiquiti lists its USG and USG-Pro gateways as Legacy.
- Update first, then decide. Install the latest firmware even on an end-of-life model: TP-Link's advisory on old routers (last updated May 12, 2026) says some received security updates "where technically feasible", and recommends upgrading to a supported product.
A government label won't tell you this yet. The FCC's U.S. Cyber Trust Mark, whose registry is meant to show a product's support period, "does not include personal computers, smartphones, and routers".
Your plan vs the router's ports
A 1 Gbps Ethernet port carries about 940 Mbps of actual data after overhead (arithmetic: with standard 1,500-byte packets, each frame takes 1,538 bytes of wire time and carries 1,460 bytes of data, or 1,448 when TCP timestamps add their 12 bytes). So:
- Plan up to about 900 Mbps: a router with gigabit ports isn't the port bottleneck. If you're not getting your plan, look at the tests below before buying anything.
- Plan faster than 1 Gbps with a 1 Gbps internet port: the whole household is capped near 940 Mbps. That's a real reason to replace.
- Multi-gig internet port but 1 Gbps LAN ports: devices together can use the plan, but one wired device tops out near 940 Mbps.
- Internet plan 2 Gbps
- Provider's fiber terminal Multi-gig port
- Old router's internet port 1 Gbps: about 940 Mbps for everyone
- Phones and laptops Share what's left
Routing speed matters too, and most makers don't publish it, so a fast port isn't proof. The way to find out is a wired test through the router compared with a test from the provider's own equipment. Both topics are covered in detail in why a multi-gig plan may not deliver multi-gig speed and choosing a router for multi-gig fiber.
Wi-Fi generation vs your devices
A router and a device use the newest generation they both support, so a new generation helps only the devices that have it. Two situations justify replacing:
- The router is Wi-Fi 5 or older and most devices are Wi-Fi 6 or newer. Apple lists its Wi-Fi 6 iPhones, from the iPhone 11 to the iPhone 17e, at 1,200 Mbps for an 802.11ax (Wi-Fi 6) link at 80 MHz; on a Wi-Fi 5 router they connect with the older 802.11ac instead.
- Phones or laptops you rely on have 6 GHz and the router doesn't. Apple's Wi-Fi 6E and 7 devices, every Pixel since the Pixel 6 (US models) and laptops with Intel's AX210 or Wi-Fi 7 cards can use 6 GHz, which only Wi-Fi 6E and tri-band Wi-Fi 7 routers offer.
If neither applies, a newer generation is a nice-to-have. A Wi-Fi 6 router already serves Wi-Fi 6 devices at their full link rate. Which generation to buy, and where Wi-Fi 7 now costs the same as 6E, is in Wi-Fi 6, 6E or 7: which should you buy now?
Missing security and features
- WPA3. The Wi-Fi Alliance says WPA3 support "has been required in all new Wi-Fi CERTIFIED devices since 2020", so an older router may not have it. Apple recommends "WPA3 Personal for better security, or ... WPA2/WPA3 Transitional for compatibility with older devices", and says to avoid TKIP. A router that can offer neither, and isn't getting updates, should go. One that offers WPA3 only after a firmware update just needs the update.
- 6 GHz. A router needs a 6 GHz radio to offer it, which means Wi-Fi 6E or tri-band Wi-Fi 7. WPA3 is mandatory there.
- Features you'd use. Smart queue management for calls and games, a guest or IoT network, VLANs, a VPN server, mesh expansion, local management without a cloud account. If you need one and your router lacks it, that's a reason; see the router guide's features checklist. Check whether the feature needs a subscription on the new router.
What a new router won't fix
| Cause | What it looks like | The fix instead |
|---|---|---|
| The plan or the provider's line | Slow even on a computer wired to the router, or at the provider's own gateway | Contact the provider with wired test results |
| Placement and walls | Fast near the router, slow or dropping in certain rooms | Move the router, wire what stays put, add an access point: see fixing dead zones |
| A weak mesh link | One mesh unit's room is slow even with good signal to it | Move or wire that unit: see why mesh doesn't fix every slow room |
| The device | One phone or laptop is slow everywhere, others are fine | Update it, or check its Wi-Fi generation; an old device keeps its own limits on any router |
| Bufferbloat | Calls and games lag only when someone uploads or downloads | Smart queue management, if your router has it: see the bufferbloat and SQM guide |
| Two routers in a row | Port forwarding, game chat or VPNs fail behind the provider's gateway | Fix the setup, not the hardware: see double NAT |
Try this before you buy
This order separates the provider, the router and the house with the fewest purchases. It needs a computer with an Ethernet port or adapter.
- Write down the symptom precisely: slow everywhere or in some rooms, all devices or one, all day or evenings, downloads or calls.
- Restart the modem and router. Ookla, which runs Speedtest, calls it stock advice that "solves an astonishing number of problems".
- Test wired at the router. Close other apps and test from a computer plugged into a LAN port. Well below your plan? Run your provider's own equipment test if it offers one. Ookla says that after a clean wired test and a restart "you should now have enough evidence to contact your ISP".
- Update the firmware and check its support status against the maker table. End of support is a reason to replace even if speed is fine.
- Check the port speeds the router's internet port and your computer actually connected at, against your plan (above).
- Test Wi-Fi next to the router, then in the problem rooms. Fine wired but slow next to the router on Wi-Fi points to the router's Wi-Fi or the device: try a second device. Fast nearby and slow far away is coverage.
- Test latency under load while someone uploads. Lag only under load is bufferbloat, not age.
- Only then decide, and let the failed check choose the replacement: a faster internet port, a 6 GHz band, an extra access point, or a supported model.
A fuller walk-through of slow connections is in why is my internet slow?
If you do replace it
Require four things: a model the maker still sells and supports, an internet port at least as fast as your plan (2.5 Gbps covers plans up to 2 Gbps), the 6 GHz band if your devices use it, and WPA3. Then check the maker's support policy in the table above before you pay.
Current candidates, by a stated rule: the two lowest-priced current Wi-Fi 7 models in each of four groups (routers and mesh systems, each with and without a 6 GHz band) whose internet port and at least one LAN-only port are 2.5 Gbps or faster. Mesh kits are ranked by price per unit. Only prices the catalog records from the maker's own store or list price count, not launch prices or prices marked not re-confirmed. Catalog checked October 20, 2026.
| Product | Internet port | Fastest LAN port | Maker's routing, plan or wired-speed figure | Price |
|---|---|---|---|---|
| NETGEAR Nighthawk RS200 Router · Wi-Fi 7 |
2.5 Gbps | 2.5 Gbps | Not published | $229.99 Manufacturer store price, checked October 20, 2026 |
| ASUS RT-BE86U Router · Wi-Fi 7 |
10 Gbps | 2.5 Gbps | Not published | $269.99 Manufacturer store price, checked October 20, 2026 |
| GL.iNet Flint 3 (GL-BE9300) Router · Wi-Fi 7 |
2.5 Gbps | 2.5 Gbps | Not published | $209.99 Manufacturer store price, checked October 20, 2026 |
| Ubiquiti UniFi Express 7 (UX7) Router · Wi-Fi 7 |
10 Gbps | 2.5 Gbps | Not published | $219.00 Manufacturer store price incl. US store surcharge (list $199.00), checked October 20, 2026 |
| TP-Link Deco BE23 (3-pack) Mesh system · Wi-Fi 7 |
2.5 Gbps | 2.5 Gbps | Not published | $299.97 Manufacturer store price, checked October 20, 2026 |
| TP-Link Deco BE25 (3-pack) Mesh system · Wi-Fi 7 |
2.5 Gbps | 2.5 Gbps | Not published | $299.99 Manufacturer store price, checked October 20, 2026 |
| TP-Link Deco BE63 (2-pack) Mesh system · Wi-Fi 7 |
2.5 Gbps | 2.5 Gbps | Not published | $449.99 Manufacturer store price, checked October 20, 2026 |
| NETGEAR Orbi 770 Series (RBE773) (3-pack) Mesh system · Wi-Fi 7 |
2.5 Gbps | 2.5 Gbps | Not published | $699.99 Manufacturer store price, checked October 20, 2026 |
The first two rows and the Deco BE23 and BE25 have no 6 GHz band, so they suit homes whose devices don't use it. Mesh prices are for the pack shown: by our arithmetic, $99.99 a unit for the Deco BE23 3-pack, $100 for the BE25 3-pack, $225 for the Deco BE63 2-pack and $233.33 for the Orbi 770 3-pack. How many units you need is a coverage question: the methodology gives the rule of thumb, and how many mesh nodes you need works through it. Wider shortlists, including models with gigabit LAN ports, are in Wi-Fi 7 routers at $200 or less and Wi-Fi 7 mesh kits under $500.
Frequently asked questions
How many years should a router last?
There's no fixed number. Support periods differ by maker: eero lists security updates through at least 2030 or 2031 for every model it still sells, NETGEAR's end of service generally comes three years after a model's last sale date, and GL.iNet supports products up to two years after their last manufacturing date. Check your model's status rather than counting years.
Is it safe to keep using a router after updates stop?
It keeps working, but new vulnerabilities won't be fixed. The FBI warned in 2025 that criminals were compromising end-of-life routers with remote administration turned on. If you must keep one for a while, install the last firmware, turn off remote management and use a strong, unique admin password, then replace it.
Will a new router make my internet faster?
Only if the old router was the limit: an internet port slower than your plan, routing that can't keep up, or Wi-Fi that your devices outgrew. If a computer wired to the old router already gets close to your plan, a new router won't raise internet speed, though it may improve Wi-Fi in some rooms.
Do I need to replace a router because of the FCC's 2026 Covered List change?
No. The FCC says consumers using routers covered by the change do not need to do anything and can keep using them, and an FCC waiver lets previously authorized routers keep receiving updates that mitigate harm to consumers until at least January 1, 2029. The waiver allows updates but doesn't promise them, so check your maker's own support status.
My provider supplied the router. Should I replace it?
Run the same checks. If it fails one, ask the provider about a newer gateway first, since it may be included in your service. If you add your own router, avoid two routers in a row by using bridge mode or IP passthrough, as our guide to bridge mode explains.
Sources
Read on October 29, 2026. Product specifications and prices come from the RouterHaus catalog (checked October 20, 2026), published at /data.
- eero: Software security updates
- Google: Security updates and security validation results for Google's connected home devices
- NETGEAR: End of Service products and policy and October 2026 NETGEAR Security Advisory (last updated October 28, 2026)
- TP-Link: End-of-Life Policy, US end-of-life list, home networking (PDF) and Security advisory for CVE-2023-50224 (last updated May 12, 2026)
- Linksys: Product end of life (lifecycle phases) and Linksys End of Life Policy
- ASUS: End-of-life product list, Networking product duration of security update support (updated October 5, 2026) and Duration of security update support (only for Singapore); firmware pages for the RT-AX86U and RT-AX88U
- ASUS: RT-AX86 Series (Wi-Fi 6)
- Ubiquiti: Vintage and Legacy products
- GL.iNet: Security updates (support period)
- FBI IC3: Cyber criminal proxy services exploiting end of life routers (May 7, 2025)
- FCC: FAQs on recent updates to the Covered List regarding routers produced in foreign countries (updated May 12, 2026), fact sheet (March 23, 2026) and the Covered List
- FCC Office of Engineering and Technology: DA 26-454, extension of software and firmware update waiver (May 8, 2026, PDF)
- FCC: U.S. Cyber Trust Mark
- Wi-Fi Alliance: WPA3 deployment options (PDF)
- Apple: Recommended settings for Wi-Fi routers and access points and Wi-Fi and Ethernet specifications for Apple devices
- Google: Pixel phone hardware tech specs and Intel: Wi-Fi 6E AX210 specifications
- Ookla: Why are my speeds so slow?
- IETF RFC 6349: Framework for TCP throughput testing (section 4.1.1) and RFC 7323: TCP timestamps option (overhead behind the 940 Mbps figure)