How long should a home router last?

The short answer

There is no number of years. Neither the FBI nor CISA gives one. What matters is whether the company that made your router still releases security fixes for it. A router that still gets fixes is in better shape than one that does not, whatever its age.

What "end of life" means

The FBI explains it this way: "When a hardware device is end of life, the manufacturer no longer sells the product and is not actively supporting the hardware, which also means they are no longer releasing software updates or security patches for the device."

The FBI's example of an old router was this: "Routers dated 2010 or earlier likely no longer receive software updates issued by the manufacturer and could be compromised by cyber actors exploiting known vulnerabilities." That is an example, not a safe line. Support ends when the maker says it ends, so a newer router can lose support too.

Why it matters

In May 2025 the FBI reported: "Recently, some routers at end of life, with remote administration turned on, were identified as compromised by a new variant of TheMoon malware." It added that "TheMoon does not require a password to infect routers; it scans for open ports and sends a command to a vulnerable script," and that the malware "allows cyber actors to install proxies on unsuspecting victim routers and conduct cyber crimes anonymously." Without security fixes, a flaw that is found stays open. Read more in why check your home network.

How to find out whether yours is still supported

1. Find the model number. It is printed on a label on the bottom or back of the router. If your internet company gave you the box, the label may show their name and a model code.
2. Go to the maker's own website. Search for the maker's name, the model and the word "support". Use the maker's site, not a download site.
3. Look at the newest update and its date. If the page says "end of life", "discontinued" or "end of support", treat the router as old. If the newest update is several years old, that is a warning sign. That second point is our rule of thumb, not an official line, and it is not proof either way, because some routers simply need few fixes.
4. If your internet company supplied it, ask them. The FTC advises: "If you got your router from your Internet Service Provider (ISP), like Verizon or Comcast, check with your ISP to see whether it sends out automatic updates." See ISP router or your own.
5. Look in the router's own settings. CISA notes that "some routers have the option to turn on automatic updates." If yours has an update page, see when it last checked.

If it is no longer supported

The FBI's advice is plain: "If the router is at end of life, replace the device with an updated model if possible." Until you can, the FBI also says: "Login online to the router settings and disable remote management/remote administration, save the change, and reboot the router." Our router settings checklist shows where to find it, and is my router too old has more on telling and on what to look for when buying.

If you are shopping for a new one

We cannot give you a number of years, and the agencies do not either. Before you buy, look on the maker's site for a statement of how long they will release updates for that model, and prefer a router that can update itself. If you cannot find any statement, that tells you something too. This is our advice, not a rule from the notices above.

Sources

• FBI Internet Crime Complaint Center, "Cyber Criminal Proxy Services Exploiting End of Life Routers" (alert I-050725-PSA, May 7, 2025): ic3.gov
• CISA, "Home Network Security" (archived page, released February 1, 2021): cisa.gov
• Federal Trade Commission, "How To Secure Your Home Wi-Fi Network" (consumer advice, December 2022): consumer.ftc.gov

Quotes are copied from those pages. We read them directly on November 8, 2026. Agencies revise and archive pages, so check the originals for anything you plan to rely on.