When to replace your router: age, security updates, and the signs it is dying
The rule most people repeat — replace your router every five years — measures the wrong thing. A router’s birthday, counted from the day you bought it, tells you almost nothing about whether it should be replaced. The clock that matters runs from the model’s launch date and measures something else entirely: how long the manufacturer keeps publishing security updates for it. An older router still receiving updates and a newer one the maker has abandoned are opposite cases wearing similar ages.
The clocks disagree, so use a check instead
The lifespan figures in circulation do not line up, and presenting any one of them as the answer would hide that. DadsFam’s analysis puts manufacturer support typically stopping 3–5 years after a model’s launch, with budget models ending support around the 2-year mark. The popular framing is a flat five years. Those numbers describe different things — a support window versus a rule of thumb — and they produce different verdicts for the same router sitting on your shelf.
Two points from that same analysis cut through the disagreement. First, the support clock starts at the model’s launch date, not your purchase date: a router bought on clearance two years after launch may have most of its support life already spent. Second, the real replace reason at the end of that clock is the end of security updates, not age itself. Clark’s consumer coverage reaches the same place from the other direction: age alone is not the risk, and a router still receiving updates is a different case from an abandoned one.
Why the end of updates is the hard line
An unpatched router is not a theoretical exposure. DadsFam notes that in May 2025 the FBI named 13 end-of-life router models as actively compromised — routers whose makers no longer published fixes, targeted precisely because no fix was coming. That is the concrete version of the support argument: once updates stop, every vulnerability found afterwards stays open permanently.
CipherTechOS’s security guide adds a floor for the router you keep: WPA2-AES is the minimum acceptable encryption. A router that cannot offer at least that has failed a basic check regardless of its support status — and one that passes it, and still receives firmware, has passed the two checks that matter most.
The support check and fault isolation, step by step
This sequence takes a few minutes and separates three situations that look identical from the couch: a router that is finished, a router that is fine but badly placed or on a slow plan, and a router your provider will swap for free.
- Read the exact model off the label. Everything after this step keys off that exact model, not the brand alone.
- Open the manufacturer’s support or end-of-life page. CipherTechOS’s guide directs owners to the maker’s support/EOL page and the date of the latest firmware. Find your model and note whether it is listed as supported or end-of-life.
- Check the latest firmware date. Compare the date of the newest firmware for your model against today. A recent release means the support clock is still running. A newest release that is years old is the practical signature of an abandoned model, whatever its purchase date says.
- Work out the launch-based age. If the support page or the model’s documentation shows when the model launched, count from there. Support typically stopping 3–5 years after launch — around 2 years for budget models — tells you roughly how much runway the model was ever going to have.
- Check the encryption floor. In the router’s wireless security settings, confirm the network is running WPA2-AES or better. Below that minimum, the router fails on security grounds alone and the rest of the sequence is moot.
- If the router is rented from your internet provider, ask about a swap before shopping. CipherTechOS notes an ISP may replace a rented router at no cost. One phone call can turn a purchase into a free exchange.
- Isolate the fault before blaming the hardware. If your complaint is performance rather than support status, run one test session with a device wired directly to the router, or used in the same room. While you test, note what the router itself is doing — whether it reboots on its own, whether a band has disappeared from the network list, whether the case runs unusually hot. Symptoms that persist wired and up close point at the router or the line. Symptoms that vanish up close point at placement or coverage, and a new router placed in the same bad spot inherits the same problem.
- Decide using the framework below, not the birthday. Support ended means replace. Support running and the fault isolated to placement means fix the placement. Support running, encryption sound, and no persistent hardware symptoms means keep the router and spend nothing.
Dying, abandoned, or just misplaced?
| What the check shows | Reading | Move |
|---|---|---|
| Model listed end-of-life, or latest firmware years old | Abandoned: no security fixes are coming | Replace — this is the one non-negotiable trigger |
| Firmware still current, WPA2-AES or better available | Supported and sound on the security checks | Keep it, whatever the purchase date says |
| Problems vanish wired or in the same room | Healthy router, bad position or coverage gap | Move the router or fix coverage; do not replace |
| Problems persist wired and up close | Fault sits with the router or the incoming line | Take the test results to your provider; replace only if the line checks out |
| Router is ISP-rented and due for replacement | The cost may not be yours | Ask the provider about a no-cost swap first |
What success looks like
Success here is a verdict you can defend, in either direction. Keeping the router is a success when the support page shows your exact model still supported, the latest firmware is current and installed, the network runs WPA2-AES or better, and your performance test showed the original problem was placement — now fixed by moving the router, with the same devices holding a steady connection in the rooms that used to struggle. Replacing is a success when it is triggered by evidence: an end-of-life listing, a firmware history that stopped years ago, or a fault that persisted through the wired, same-room test. What failure looks like is simpler: a new router, bought on age alone, sitting in the same spot with the same problem.
One more replace reason, kept in its place
There is a legitimate second trigger, and it is narrower than the marketing version. If the devices you actually own — phones, laptops, the machines you use daily — already support a newer Wi-Fi standard than your router offers, replacing the router is what unlocks capability you have already paid for in the devices. The order matters: devices first, router second. A new standard on the router alone, with no device able to use it, changes nothing you can measure. Check it after the support check, treat it as an upgrade decision rather than a repair, and let the security clock — end of updates, counted from launch — remain the trigger that is not optional.
— Dex Carter, Tech Writer