Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Unexpected VPN accounts, changed ports, unfamiliar DDNS entries, or remote-access settings on an ASUS router deserve prompt attention—but none alone proves an attacker accessed the router. ASUS’s guidance for a suspected compromise is to install the latest firmware for the exact model, factory-reset the router, and create a strong administrator password. Start by disabling remote services you do not need, then inspect the settings and recover the router from a clean configuration.

First, limit remote access you do not need

Use a trusted device connected to your home network to sign in to the router’s administration interface. If you find an internet-facing service you do not recognize or need, disable it while you investigate. ASUS identifies remote access from WAN, port forwarding, DDNS, VPN server, DMZ, and port triggering as services to disable when unnecessary. Menu names and locations vary by model and firmware.

If the router’s VPN server is unexpected, turn it off for now. This is different from a VPN app running on a phone, computer, or TV: disabling a router-hosted VPN server does not require uninstalling a client VPN app from those devices.

Check for changes that you did not make

ASUS lists changes to port numbers, VPN accounts or passwords, and DDNS settings as possible signs of altered router settings. Its security guidance also flags unknown connected devices, unusual connection activity, and unexpected setting changes as reasons to review security. These are warning signs, not conclusive proof of compromise.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
ASUS RT-AX1800S Dual Band WiFi 6 Extendable Router, Subscription-Free Network Security, Parental Control, Built-in VPN, AiMesh Compatible, Gaming & Streaming, Smart Home
  • New-Gen WiFi Standard – WiFi 6(802.11ax) standard supporting MU-MIMO and OFDMA technology for better efficiency and throughput.Antenna : External antenna x 4. Processor : Dual-core (4 VPE). Power Supply : AC Input : 110V~240V(50~60Hz), DC Output : 12 V with max. 1.5A current.
  • Ultra-fast WiFi Speed – RT-AX1800S supports 1024-QAM for dramatically faster wireless connections
  • Increase Capacity and Efficiency – Supporting not only MU-MIMO but also OFDMA technique to efficiently allocate channels, communicate with multiple devices simultaneously
  • 5 Gigabit ports – One Gigabit WAN port and four Gigabit LAN ports, 10X faster than 100–Base T Ethernet.
  • Commercial-grade Security Anywhere – Protect your home network with AiProtection Classic, powered by Trend Micro. And when away from home, ASUS Instant Guard gives you a one-click secure VPN.
  • Look for VPN accounts, credentials, or a VPN server you do not recognize.
  • Check ports, DDNS entries, WAN access, port forwarding, DMZ, and port-trigger settings for unexpected changes.
  • Review connected devices and look for unfamiliar entries or unusual activity.
  • Check whether your exact router model still has firmware available from ASUS.

ASUS’s security advisory describes the settings to review: ASUS router security advisory. Its security FAQ provides additional guidance on unknown devices and security settings: ASUS router security FAQ.

Update the router, then reset it

ASUS’s June 4, 2025 guidance for a router suspected of compromise—particularly one that had outdated firmware and a weak password—is to update firmware, perform a factory reset, and set a strong administrator password. Obtain firmware through ASUS support for the exact router model and region; firmware for a similar-looking model is not interchangeable. ASUS recommends keeping firmware current in its security guidance.

Rank #2
Sale
ASUS RT-BE82U WiFi 7 Router - Dual-Band, 6.5 Gbps, Mesh + VPN Compatible
  • Ultrafast WiFi 7 – WiFi 7 (802.11be) dual-band extendable router boosts speed up to 6500 Mbps, with 4096-QAM increasing a single frequency band’s transmission speed by 1.2 times
  • Five 2.5GbE Ports – 2.5GbE ports prioritize traffic, optimizing wired internet connectivity for maximum performance
  • Hassle-free AiMesh Extendable Network – AiMesh extendable routers enable whole home seamless roaming with rich, advanced features
  • Multi-link Operation – Link to multiple bands at the same time to ensure stable internet connections and efficient data transfers
  • Commercial-Grade Network Security – AiProtection Pro powered by Trend Micro, plus a one-tap security scan and Safe Browsing
  1. Install the model-specific firmware. Use the router’s update function or the firmware and instructions on the official ASUS support page for your precise model. Follow that model’s instructions rather than assuming another model’s procedure applies.
  2. Perform a factory reset. Reset the router using the procedure ASUS documents for your model. A factory reset removes unauthorized or abnormal settings, but does not establish forensic proof that the router is clean.
  3. Configure it as new. Set a fresh administrator password and a different Wi-Fi password. Avoid restoring a saved configuration that could reintroduce suspicious VPN or remote-access settings.
  4. Re-enable only what you need. Apply the security settings below, then add VPN or remote-access features only if you use them and understand their configuration.

ASUS’s statement with the recovery steps is dated June 4, 2025: ASUS official statement.

Choose the appropriate reset option

ASUS distinguishes two reset choices in its reset FAQ. The available screen labels and menu path vary by model and firmware.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
ASUS ROG Rapture GT-BE98 Pro WiFi 7 Gaming Router - Quad-Band, 30Gbps, Mesh
  • Beyond-fast WiFi 7 (802.11be) with new 320MHz channels in the 6 GHz band and 4096-QAM significantly increases network capacity and throughput, with speeds of up to 30 Gbps
  • Multi-link Operation links to multiple bands at the same time to ensure stable internet connections and efficient data transfers
  • Cutting-edge external dual-feeding antennas boost coverage by providing high efficiency and significantly enhanced signal strength
  • Maximized wired connectivity and flexibility with dual 10G ports and quad 2.5G ports
  • Triple-Level Game Acceleration - The GT-BE98 Pro boosts your PC gaming traffic every step of the way, from your PC gaming port all the way to the game server.
Option What ASUS says it clears When to consider it
Restore Logs and NVRAM It is a less extensive clearing option; for suspected unauthorized settings, ASUS’s compromise guidance calls for a factory reset.
Initialize Logs, NVRAM, and the database, which may include AiProtection monitor logs, Traffic Analyzer logs, and web history ASUS describes Initialize as equivalent to a hard factory reset.

See ASUS’s reset FAQ for its explanation of Restore and Initialize. Follow the instructions for your router rather than relying on a menu path from a different model.

Secure the fresh configuration

ASUS recommends an administrator password longer than 10 characters, with separate passwords for router administration and Wi-Fi. Its June 4, 2025 statement specifies at least 10 characters using uppercase and lowercase letters, numbers, and symbols; its June 2026 FAQ says more than 10 characters. These are ASUS recommendations, not a guarantee of security.

Rank #4
Sale
ASUS RT-BE88U WiFi 7 Router - x2 10G Ports, Up to 7.2 Gbps, Mesh Compatible
  • Blazing-fast WiFi 7 tech boosts throughput up to 7200Mbps with Multi-Link Operation and 4096-QAM.
  • Bolster your wired network capacity up to 34G with one cutting-edge 10G SFP+ port and one standard 10G WAN/LAN port.
  • Establish always-on internet through AI WAN detection, versatile WAN configuration options, and a convenient USB port ready for 4G LTE and 5G Mobile tethering.
  • Unleash demanding WiFi 7 and 10G network applications with a powerhouse quad-core 2.6GHz 64-bit CPU.
  • Easily establish up to five SSIDs with Guest Network Pro for easy IoT device setup and management, instant VPN connections, and convenient parental controls.
  • Use WPA2-AES or WPA3 for Wi-Fi, choosing the strongest option supported by your devices and router.
  • Enable the firewall and AiProtection if your model and operating mode support them.
  • Keep WAN administration, SSH, and Telnet disabled unless you have a specific need for them.
  • Leave other internet-facing services disabled unless you actively use them.

ASUS notes that security features vary by model and firmware, and AiProtection is unsupported in some operating modes, including Access Point mode. Check the ASUS security FAQ and AiProtection FAQ for applicable details.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Understand what AiProtection can—and cannot—tell you

AiProtection may assess certain router security settings and block some threats on supported models, but it is not evidence that a suspected compromise has been removed. A client device’s VPN also changes what the router can inspect: ASUS says encrypted traffic from a device using a VPN cannot be inspected by AiProtection for threat detection. That visibility limitation does not by itself indicate that the router’s VPN configuration was compromised.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Sale
ASUS RT-AX3000S Dual Band WiFi 6 Extendable Router, Instant Guard, Parental Control Scheduling, Built-in VPN, AiMesh Compatible
  • New-Gen WiFi Standard - Supporting 802.11ax WiFi standard for better efficiency and throughput.
  • Ultra-fast WiFi Speed - RT-AX3000S supports 1024-QAM for dramatically faster wireless connections. With a total networking speed of about 3000Mbps — 574 Mbps on the 2.4GHz band and 2402 Mbps on the 5GHz band.
  • Increase Capacity and Efficiency - Supporting not only MU-MIMO but also OFDMA technique to efficiently allocate channels, communicating with multiple devices simultaneously
  • Easy Extendable Network - Enjoy seamless roaming with rich, advanced features by adding any AiMesh-compatible router.

When to contact ASUS or replace the router

Contact ASUS support for model-specific reset or firmware instructions if you cannot access the administration interface, cannot complete the reset, or settings you removed return afterward. ASUS’s cited guidance does not provide a method for forensically confirming whether an individual router was compromised, so do not treat a successful reset as proof of a clean device.

A suspected compromise does not automatically mean you need a new router. ASUS says an end-of-life router can still be used with the latest firmware available for that model, a strong administrator password, and remote-access features disabled. Consider replacing it if the exact model no longer receives security firmware, you cannot reset and configure it reliably, or suspicious settings persist after recovery. ASUS’s security advisory and June 2025 statement support a model-specific decision rather than automatic replacement.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.