ISP router or your own: who looks after it?
In short: Whether your router came from your internet company or from a shop changes who keeps it updated. Either can be fine. The risk is assuming someone else is doing it.
Two common setups
A gateway from your internet company. Often one box that is the modem, router and Wi-Fi in one, supplied or rented by your provider.
A router you bought. You buy a router from a shop and connect it to a modem or to the provider's box.
Many homes have a mix of both. Either can be fine. The risk is assuming someone else is keeping it up to date when nobody is.
Who keeps it updated
For a box from your provider, the FTC says to ask: "If you got your router from your Internet Service Provider (ISP), like Verizon or Comcast, check with your ISP to see whether it sends out automatic updates." Some providers update the box for you. Whether yours does is something to confirm with them, not to assume.
For a router you own, the job is yours unless the router updates itself. CISA says: "Check your router manufacturer's website to ensure you are running the latest firmware version," and notes that "some routers have the option to turn on automatic updates." The FTC adds: "To make sure you hear about the latest version, register your router with the manufacturer, and sign up to get updates."
The provider's own door into your router
Providers often need a way to reach the box they supplied, to fix problems or change settings. In late 2016 CISA described a variant of an attack that "actively scanned TCP port 7547 on broadband routers" with a known flaw, and said affected routers "use protocols that leave port 7547 open." That is the door covered by our router remote management guide.
If the free check finds port 7547 open, it is often your provider's normal management door. That does not mean something is wrong. It does mean the right step is to ask the provider whether it should be reachable from the internet, and whether the box is on a supported, updated version.
Pros and cons, in plain words
- Provider gateway. Usually they replace it when it fails and may update it for you. You may get fewer settings, and you depend on them for fixes. This is our general description, and it varies by provider.
- Your own router. You choose the model and the settings, and you can replace it when support ends. You also have to remember to check for updates, or pick one that updates itself.
Neither is automatically safer. What matters is whether the router still gets security fixes and someone is responsible for installing them.
Questions to ask your provider
- Does this box update itself, and how do I check when it last did?
- Do you manage this box over the internet? Can that be limited to your network only?
- If the box is old, how do I get a replacement?
- Can I turn off remote management and UPnP in the settings you let me see?
We have plain steps for several providers: Xfinity, Spectrum, AT&T and Verizon Fios. To find out if a box is too old, see how long a router should last.
Run the free checkSources
- CISA, "Heightened DDoS Threat Posed by Mirai and Other Botnets" (alert TA16-288A, released October 14, 2016, now archived): cisa.gov
- CISA, "Home Network Security" (archived page, released February 1, 2021): cisa.gov
- Federal Trade Commission, "How To Secure Your Home Wi-Fi Network" (consumer advice, December 2022): consumer.ftc.gov
Quotes are copied from those pages. We read them directly on November 8, 2026. Agencies revise and archive pages, so check the originals for anything you plan to rely on.