- This router model was used to break into US military and government networks - This router model was specifically weaponized to infiltrate US military and government networks. The same firmware architecture runs on devices in people's homes.
- A US ban could cut off firmware updates with little warning, leaving this router permanently exposed - A US government ban or forced sale could cut off firmware updates with little warning. Once that happens, this router is permanently unprotected.
- Your home network is more exposed than it should be - Your home network is more exposed than it should be. Your work laptop, banking sessions, security cameras, and smart home devices all pass through this router - a flaw here gives an attacker leverage over all of them at once.
- TP-Link is legally required to share your network data with the Chinese government if asked - The manufacturer is legally required to share your network data with the Chinese government if asked. This isn't theoretical - it's a legal obligation that can't be refused.
This router has documented security problems. Every device on this network - your work laptop, banking app, Ring camera, smart lock - is running at higher risk than it should be.
An F is not a warning - it’s a finding that the router has been independently flagged for security or supply-chain concerns serious enough to warrant action.
-
This router model was used to break into US military and government networks
This router model was specifically weaponized to infiltrate US military and government networks. The same firmware architecture runs on devices in people's homes.
Show technical detail
Chinese government hackers used this router brand to attack US infrastructure: Chinese state hackers used TP-Link routers as attack infrastructure against US military, government, and critical infrastructure. The Deco line shares TP-Link's firmware architecture and ownership structure.
-
A US ban could cut off firmware updates with little warning, leaving this router permanently exposed
A US government ban or forced sale could cut off firmware updates with little warning. Once that happens, this router is permanently unprotected.
Show technical detail
The US government is investigating this company and may force a ban: The DOJ and FCC opened formal investigations into TP-Link's corporate structure. A forced sale or ban is under active consideration.
-
Your home network is more exposed than it should be
Your home network is more exposed than it should be. Your work laptop, banking sessions, security cameras, and smart home devices all pass through this router - a flaw here gives an attacker leverage over all of them at once.
Show technical detail
FCC DA 26-278 - new models blocked: The FCC issued DA 26-278 blocking new TP-Link models from authorization, signaling active regulatory action.
-
TP-Link is legally required to share your network data with the Chinese government if asked
The manufacturer is legally required to share your network data with the Chinese government if asked. This isn't theoretical - it's a legal obligation that can't be refused.
Show technical detail
Chinese National Intelligence Law: TP-Link is legally required to cooperate with PRC intelligence. Applies to every TP-Link product regardless of model.
An A-rated alternative is shown below.
We'll email you if a new vulnerability hits your TP-Link Deco X20. One email per incident. No spam.
- CISA Advisory AA23-144A · 2023 ↗
- FCC Equipment Authorization Database ↗
- FCC Covered List · National Security Designation ↗