Short answer: replace your router when it stops receiving security updates. That’s the clearest signal, and both manufacturers and US security agencies say so. The other good reasons are practical: it can’t use current Wi-Fi security, its internet port is slower than your plan, or it can’t cover your home even in the best spot. Age on its own isn’t a reason.

Reason 1: it no longer gets security updates

Routers face the internet directly, so their firmware needs fixing when security flaws are found. Manufacturers only do that for a limited time:

  • NETGEAR says products that reach End of Service no longer receive firmware updates, including security updates, and that this generally happens three years after the product’s last sale date. It also says that, generally, only products still within their support period receive security updates.
  • ASUS publishes a list of end-of-life networking models that are no longer manufactured or updated with firmware.

Unsupported routers are a real target. In a May 2025 public service announcement, the FBI reported end-of-life routers being compromised by variants of TheMoon malware, said routers from 2010 or earlier likely no longer receive updates, and recommended replacing end-of-life routers. CISA likewise says end-of-support edge devices no longer receive security updates and urges replacing them.

How to check yours: look up your exact model on the manufacturer’s end-of-life or end-of-service list, and check the date of its latest firmware on the support page. If the model is listed, or there’s been no firmware release for a long time, plan a replacement. While it’s still supported, keep updates switched on: CISA recommends routine updates, and notes that some routers can update automatically.

Reason 2: it can’t use current Wi-Fi security

The Wi-Fi Alliance has required WPA3 support in new Wi-Fi CERTIFIED devices since 2020, and the FTC recommends WPA3 Personal or WPA2 Personal encryption. If your router only offers older options such as WEP or the original WPA, it can’t meet that baseline, which is a strong reason to replace it.

Reason 3: its internet port is slower than your plan

A router can’t deliver more speed than its internet (WAN) port allows. gFiber, for example, recommends a router with a 1 Gbps WAN port for its 1 Gig plan and a 10 Gbps WAN port for its multi-gig plans. If you’ve upgraded to a plan faster than 1 Gbps and your router only has gigabit ports, the router is now the limit. See the best routers for multi-gig internet.

Reason 4: it can’t cover your home, even in the best spot

Before blaming the router, try moving it: see where to put your router. If rooms are still weak with the router in a good spot, more access points or a mesh system will usually help more than a single new router. Mesh Wi-Fi vs router vs extender explains the options.

Not reasons on their own

If you’re keeping it for now

The FBI’s advice for routers still in use is to apply any available updates, disable remote management and use strong, unique passwords. Our router security checklist covers the full set of settings.

Retiring the old router

When you do replace it, NETGEAR’s advice for routers past End of Service is to disable remote access, factory reset the device and recycle it as electronic waste. To choose the replacement, start with how to choose a Wi-Fi router or our best Wi-Fi routers shortlist. In the US, also check the maker’s status under the FCC router rule.