Can your provider change your router remotely?

The phrase is used for two separate things.

1. Provider management. Your provider's systems reach the hub it supplied, over your broadband connection, to install software updates, run checks and, in some cases, fix faults remotely. You don't switch this on; it's part of how a provider-supplied hub works, and the provider's terms cover it.
2. A remote-access setting on the device itself. Some routers have a setting, often called remote management, that lets you open the router's settings page from outside your home. For example, TP-Link's guide for a range of its older routers explains that its Remote Management feature lets you reach the router's settings by typing the router's internet (WAN) address and a port number into a browser, that it's switched off in the default setting, and that allowing every address would let anyone on the internet try to connect. The UK's National Cyber Security Centre (NCSC) gives similar advice for smart devices generally: if you don't need to reach a device when you're away from your home Wi-Fi, switch off its remote access, alongside changing default passwords and turning on automatic updates.

None of the provider pages we read offers a setting that stops the provider's own updates to its hub, and the terms of Sky and BT require you to allow them, so don't expect the router's remote-access switch to do that. When you read advice to "disable remote management" or "turn off remote access", it means the user-facing setting, not your provider's ability to update the hub it lent you. If you do need to reach cameras or files at home from outside, our guide on viewing home cameras and files remotely covers safer ways than opening up the router. Our guide on how to secure your home router and Wi-Fi covers that setting alongside WPS, UPnP and admin passwords.

None of the BT, Sky or Virgin Media pages we read in October 2026 says which management system it uses, so this section describes what the published industry standards allow, not what any named provider does.

TR-069

TR-069, published by the Broadband Forum, is a protocol (a set of rules two machines use to talk) for managing equipment in customers' homes. The router or other device talks to an Auto-Configuration Server (ACS), which the standard describes as a server that "resides in the network and manages devices in or at the subscriber premises". It covers stand-alone routers and isn't tied to one type of line.

In TR-069 the device itself opens the connection to the server, and the server can "at any time" ask it to do so by sending what the standard calls a connection request. The standard says the port used for those requests must only be used for them. In other words, it's a separate route from the web settings page you log into at home.

The main jobs it lists include:

The standard also lets the server target devices one at a time or as a group, for example by maker, model or software version.

Its stated security goals are to prevent tampering with the management functions or the exchanges between device and server, keep those exchanges confidential, allow appropriate authentication for each type of exchange, and prevent theft of service. How well any provider meets them isn't something its public pages tell you.

TR-369 (USP)

The Broadband Forum describes TR-369, the User Services Platform (USP), as "the natural evolution" of TR-069: a standard protocol "for managing, monitoring, upgrading, and controlling connected devices". The uses it lists include managed Wi-Fi, troubleshooting devices and home network links, and controlling smart-home features locally or from the cloud. No provider page we read names the standard, so don't assume your provider uses it.

Here is what each provider's own help pages and terms say, checked in October 2026.

Sky

Sky's help page says updates are made "to make improvements or add new features" and asks you not to turn the hub off while it's updating. Its terms say it "may use technical data from our network and your devices to diagnose and fix faults", and that you must let it alter or replace the loaned equipment if reasonably required. Our Sky broadband deals page shows what's on offer at your postcode.

BT

BT's terms say the loaned equipment (apart from the software in it) belongs to BT, and that you mustn't interfere with it unless BT asks you to. They also say BT may "update, upgrade, improve or alter" loaned equipment, for example "to fix bugs or faults, tackle security issues" or "improve how the loaned equipment works". On its 4G Home Hub help page, BT adds that "keeping your software up to date can help protect against viruses and hackers". See our BT broadband deals page for current BT packages.

Virgin Media

Virgin's terms combine automatic software delivery with remote fault-fixing: "In many circumstances it may be possible for us to correct a fault remotely", and if not, it may send a technician. Unlike Sky's and BT's, they don't put it as something you must allow; they say the equipment will automatically accept software Virgin delivers. They also say Virgin may upgrade or update its network, equipment and services from time to time, and that if it believes an update is likely to materially disadvantage you, it will tell you and you may have a right to cancel. Our Virgin Media broadband deals page covers its packages.

Other providers

For any other provider, look in its terms for the section on equipment or software: who owns the hub, whether you must allow updates, and what happens if you use your own kit. Our broadband providers hub links to each provider's page.

Will the provider undo the Wi-Fi name, password or other changes you made?

Updates

None of the provider pages we read says that a routine software update wipes your own settings. But no page promises your custom settings will survive every update either, and management standards such as TR-069 allow a device's configuration to be changed remotely. A note of your settings is cheap insurance.

Resets

Resets are different, and the providers are clear about them:

• TalkTalk says a full router reset "will wipe your router's existing settings", such as a changed Wi-Fi password.
• Virgin Media says that after a factory reset, Wi-Fi changes such as an updated password have to be made again.
• BT says a full reset of the 4G Home Hub "will delete your personal configuration settings", and that you can back the settings up and restore them first (Device Management > Backup & Restore).

There's one route from an update to a reset. Sky says its Broadband Hub can go into recovery mode, shown by a flashing amber power light, which can happen after a software update. If it's still flashing after 15 minutes, Sky's fix is to hold the Reset button for 10 to 30 seconds, which returns the Wi-Fi details to the defaults printed on the hub. Your own Wi-Fi name and password would then need setting again. Our guide to what your broadband hub lights mean covers the other light patterns, including Virgin Media's Hub 5, where a slow green flash means it's downloading a software update.

When an update causes problems: a dated example

Firmware updates fix problems, but occasionally they cause them. ISPreview reported on 21 October 2024 that some Zen Internet customers had repeated disconnections after their FRITZ!Box 7530 routers were updated to FRITZ!OS version 8. Zen told ISPreview the issue affected "less than 0.5% of the routers we have in circulation" and that the update "triggered an automatic reboot", which it said it had identified and stopped; ISPreview updated its report the next day to say it was still seeing complaints. It's one reported case, not evidence that updates are generally risky, but a reason to note when a problem started and mention any recent update when you report a fault.

The TR-069 standard allows a device to share status, performance and diagnostic information with a management server; what providers themselves say they use is mostly technical. As of October 2026:

• Sky's terms say it may use technical data from its network and your devices to diagnose and fix faults; your IP address and technical data from its network and your devices to manage traffic and run its broadband services; and your IP address, technical data, and traffic and location data as necessary to check that you're using the service for ordinary household purposes. The terms don't list item by item what "technical data" includes.
• BT's privacy policy says that to deliver your connection and manage its network it uses device identifiers, your IP address and parental control information. Where the account holder uses the Wi-Fi controls in the BT app (Smart Hub 2, 3, 4 and 5 only), connected devices, their names and how long they've been connected are shown to that account holder, who can opt in to alerts when a new device joins.
• BT's terms also say that if it believes a device on your connection is infected with malware or tries to reach a malicious website, it might put software onto its network to stop the spread or block the site. BT describes this as putting software onto its network; the clause doesn't mention your hub. If you've had a warning like that, see our guide on what to do when your provider says a device is infected.

So in a shared BT home, the account holder using the app's Wi-Fi controls can see the connected devices; it's worth knowing who holds the account and which app features are on.

What a provider can see about the websites and services you use is a separate question, involving the connection itself rather than the hub, along with UK data-retention law. Our guide to what your broadband provider can see covers that.

Remote updates only help while the provider is still sending them:

• Sky says that "Sky hubs" have now stopped receiving service and security updates (its software list names a "Sky Hub" model separately from its Broadband, Gigafast+, Max and Sky Q hubs), and that Sky Q Hubs stopped receiving them on 31 December 2025. It says both still keep you connected to the internet.
• ISPreview reported on 29 April 2025 that NOW had emailed customers on older part-fibre packages to say their hub was no longer receiving security and service updates, or would stop receiving security updates by 2025. NOW recommended at least changing the hub's admin password, and said that from 31 July 2025 it would not replace such hubs if they developed a fault.

Since 29 April 2024, the UK's product security regulations have required makers of consumer connectable products to avoid universal default or easily guessable passwords, publish how to report security problems and publish the minimum period for which the product will get security updates. Home routers aren't on the regulations' list of excepted products (the list was extended to some vehicles in February 2025, but routers still aren't on it). So for a router covered by the rules, there should be a published support period you can check or ask about. The rules apply to businesses from 29 April 2024, so a hub supplied before then may have no published period at all, which is one more reason to ask your provider directly.

If your hub is old, ask your provider whether it's still receiving security updates and, if not, what replacement it offers. Our guide on how to get a newer router from your provider walks through that conversation.

With a router you bought yourself, the provider generally isn't managing it, and its help narrows. Sky and BT both say in their terms that if you use equipment they didn't supply, it's up to you to make sure it's compatible; Sky adds that it can't guarantee its broadband will work with it, and BT says it can only be responsible for equipment it gives you. Others say similar things:

• EE can't help set up or troubleshoot third-party routers, and says some extras, such as EE TV and its WiFi Extender, may not work with them.
• Truespeed says you can use your own router but it only supports the equipment it provides.
• Zzoomm won't set up or troubleshoot beyond its Fibre Connection Box, and may not be able to fix technical issues if you use your own router.

Virgin Media's modem mode

To use your own router you put the Virgin Hub into modem mode (not available on the Hub 5x when checked). Virgin says that on a Hub 3, 4 or 5 this temporarily turns off Cisco monitoring and SamKnows speed tests, Plume Pod compatibility, Intelligent WiFi, and Connect App features including Homescan, Hub Management and WiFi Diagnostics. They all come back when modem mode is switched off.

Updates become your job

With your own router, its maker supplies the firmware and you decide how it's installed. As an example, ISPreview reported on 1 October 2026 that FRITZ! was rolling out FRITZ!OS 8.50, which installs automatically for owners who have turned that feature on, or can be started from the fritz.box settings page. Apple recommends setting a router to install software and firmware updates automatically if possible, and the NCSC advises turning on automatic updates on smart devices. If your router has the option, switch it on.

Our full guide to using your own router with UK broadband covers the connection settings for each kind of line and returning the provider's hub.

1. Write down your custom settings: Wi-Fi name and password, guest network, any port forwards or parental controls. Use the hub's backup option if it has one.
2. Leave the hub switched on overnight where you can. Sky says it usually updates overnight.
3. Don't pull the plug on a flashing hub. Sky asks you not to turn the hub off while it's updating, and Virgin says to give a new hub about 30 minutes on start-up.
4. Check your firmware version or for updates if you suspect a problem (Sky: 192.168.0.1, Maintenance > System Details; BT 4G Home Hub: 192.168.1.1, Device Settings > Online Updates).
5. Change the hub's admin password and keep a note of it, and turn off the router's own remote-access setting unless you need it.
6. Ask your provider: is my hub still getting security updates, and if not, what replacement do you offer?
7. Mention recent updates when reporting a fault, with the date problems started.
8. Before swapping in your own router, read what your provider says it will stop supporting.
9. When your contract ends, a new deal may come with a newer hub; ask how long it will get security updates. You can compare deals at your postcode through our partner's comparison, which shows live deals; we don't switch you ourselves or give personal advice.