This is very troubling, and I’m not even sure where to start. I recently received an email message from my ISP which alerted me to an incoming update. I didn’t worry too much since this is obviously not the first update they’ve ever pushed through.

However, after this update, I noticed that my guest connections and some other things had changed / disappeared. I logged on to my router, and I immediately noticed my custom password had been reset to the default. No problem, I entered it.

At this point, I saw that all of my options were greyed out. I could change the password, which I did, but nothing else. I immediately called my ISP.

I was told that I would have to use their app now, so as much as I dislike using proprietary phone apps, I conceded and installed the app through the Play store.

However, the agent was not entirely honest with me. I still can’t bifurcate my 2.4g and 5g connections, nor can I add or remove any guest connections. I immediately enabled “privacy mode” via the app, which purportedly prevents information from being collected by something called “HomePass,” and I “Delete[d] Guard events” whatever the hell that means, but this seems really troubling. I can no longer access my modem/router settings via the normal interface, but have to use an Android app?

There is only one other ISP in my area. They have much worse/slower service, but should I switch, or is this just the “new normal”? Does what I’m describing even make sense? I’m not a tech expert, but I feel like I’ve self-taught myself how to navigate these settings, and learned from others in online forums, but now … an Android app?

I’d appreciate any advice. I’d even be willing to purchase my own modem/router instead of using the one from my ISP, if that fixes this mess.

Edit: So I need my own router, at least. I did some research, and these are the ones I can get locally that are within my budget:

  • TP-Link Archer AC1900 Dual-Band Mu-Mimo Wi-Fi Router with Gigabit Port

  • Linksys AC1200 Dual Band WiFi 5 Router

  • TP-Link Archer AX1500 WiFi 6 Dual-Band Wireless Router | up to 1.5 Gbps Speeds

  • TP-Link Archer C54 | AC1200 MU-MIMO Dual-Band WiFi Router

  • NETGEAR - Nighthawk AC1900 WiFi Router, 1.9Gbps (R6900) I’VE BEEN WARNED AGAINST NETGEAR THOUGH IN OTHER FORUMS

  • TP-Link | AX1800 4 Stream Dual-Band WiFi 6 Wireless Router | up to 1.8 Gbps Speeds

  • TP-Link Archer AX3000 | 4 Stream Dual-Band WiFi 6 Wireless Router | up to 3 Gbps Speeds

  • Linksys E7350 AX1800 Wi-Fi 6 Wireless Router

Am I right in thinking the TP-Link AX3000 is best?

Edit 2: At first, I bought the Netgear AC1900, which seemed like a great deal. Turns out it was unusable without creating a netgear account, so I returned it in exchange for the TP-Link Archer AX1500, and it appears to be working! I got everything set up pretty close to the way it was before, except even better.

Once I save money, I’ll also invest in a different modem and return this one to my ISP.

This was a big wake-up call for me in terms of privacy. I never listened to people saying not to use your ISP’s equipment because I always trusted my ISP (it’s not one of the big name ones). Never trust a company. Lesson learned. I appreciate all the responses I got! This community is great!

  • empireOfLove@lemmy.one
    link
    fedilink
    English
    arrow-up
    265
    ·
    1 year ago

    Get. Rid. Of. Their. Router.

    ISP provided networking routers are inherently garbage. They don’t want users messing with that, because your average user doesn’t even know what the fuck an ethernet cable is and will break everything by fucking around in it.

    Run your own router and put theirs into modem only mode with routing and wifi disabled. If that’s not an option ask their tech support if you can buy your own DOCSIS/fiber modem (or whatever hardware you use) and return their hardware. If they also don’t allow that… well, switch or just suck it and deal with it while the ISP rubs their nipples some more.

    • LinkOpensChest.wav@lemmy.oneOP
      link
      fedilink
      English
      arrow-up
      19
      ·
      1 year ago

      https://cdn.imgchest.com/files/j7kzcvmllm7.png

      So I can’t disable wireless mode. This too is greyed out, and it also doesn’t let me disable wireless via the app. (When I try, it throws a popup that says “You must have at least one network.”

      So is my best bet to get my own modem with router built in, or could I still connect a router to this, but never use the wifi connection through their equipment? I don’t have a lot of money, so I also want to be a bit mindful of cost.

      • keeb420@kbin.social
        link
        fedilink
        arrow-up
        20
        ·
        1 year ago

        I’d check to see if your provider has an approved modem list, buy one off that and then run your own router.

        • LinkOpensChest.wav@lemmy.oneOP
          link
          fedilink
          English
          arrow-up
          6
          ·
          1 year ago

          So I will want a separate router vs. buying one that has it built in? I can use whatever router I want, right? That part doesn’t have to be from the list.

          • stupidfly
            link
            fedilink
            English
            arrow-up
            15
            ·
            1 year ago

            You are going to get more functionality if you buy separate devices. A combo router is going to give you less flexibility in the future. That is why you keep getting that recommendation.

            • LinkOpensChest.wav@lemmy.oneOP
              link
              fedilink
              English
              arrow-up
              6
              ·
              1 year ago

              That makes sense, thanks. As much as I try to educate myself, I’m a soft sciences guy and a bit of a misfit when it comes to this type of thing :P

              • gravitas_deficiency
                link
                fedilink
                English
                arrow-up
                2
                ·
                1 year ago

                Also keep in mind that you’ll be free of whatever rental fee they were charging you to use their modem/router.

                • LinkOpensChest.wav@lemmy.oneOP
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  1 year ago

                  Damn, you’re not wong! I’ve had this ISP at this address since 2019, and before that we had them at another address for 4 years. I could have probably bought my own modem and router several times over.

          • Maximilious@kbin.social
            link
            fedilink
            arrow-up
            13
            ·
            edit-2
            1 year ago

            Any combo modem router is typically trash and you NEED separate modem because if you get a combo you will be in the same situation. They will flash the combo unit with the same firmware wether you own it or not.

            You will want an aris modem from there approved list and a good wireless router. When you swap out your modem you will need to call in so they can flash it with thier firmware (which is fine). You can then configure your router as needed.

            I can’t recommend a wireless router because I have a Unifi household and have been out of the consumer space for a while. I hear netgear nighthawk are still creame of the crop though.

            • Anony Moose@lemmy.ca
              link
              fedilink
              English
              arrow-up
              6
              ·
              1 year ago

              Wow, so ISPs can usually flash custom firmware on a 3rd party router? I’m surprised that capability exists, although I can kinda see the rationale for why it does.

            • BigDev@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              1 year ago

              Can ISP’s really flash firmware to a 3rd party router? That’s wild. I’m not sure that’s happened to me before, and I’ve been forced to use Comcast/xfinity my whole adult life. I’ve had multiple Arris modems, and whenever I check their status page, it was always Arris branded, and stayed the same before and after hooking it up and registering it with the ISP.

              I always assumed the rigamarole of registering a personal modem was simply a white listing process (give MAC address, receive internet). I’ll have to look more into it, I didn’t know there was anything else going on.

      • edge [he/him]@hexbear.net
        link
        fedilink
        English
        arrow-up
        6
        ·
        1 year ago

        When I try, it throws a popup that says “You must have at least one network.”

        Sounds like it might allow you to disable it after you plug your own router in. If not, customer service might be able to do it. Ask them to put it in modem only mode.

      • roguetrick@kbin.social
        link
        fedilink
        arrow-up
        5
        ·
        edit-2
        1 year ago

        I bought a refurbished cable modem for less than $30 off of amazon that’s working well for me. I’d just go that route instead of using their equipment. Even if it breaks in a year, that’s savings over renting ISP equipment.

      • nihth@programming.dev
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 year ago

        All the router modem combos I have used have basically disabled most of the features including wifi if it gets set in modem only mode

      • VelociCatTurd@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        1 year ago

        Some ISPs will not let you put the modem into a true bridged mode. I would try to disable as much on it as you can. As long as the traffic can pass through from the modem to your router that’s the important part.

        • LinkOpensChest.wav@lemmy.oneOP
          link
          fedilink
          English
          arrow-up
          3
          ·
          1 year ago

          That’s what I’m thinking. I looked up how to use bridge mode for my router, and it does look like I am able to access that setting, at least for now.

      • fraksken@infosec.pub
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 year ago

        That is literally fucked. There are some scenario’s where I can imagine an ISP wanting to force wireless on. a mesh network for their customers sounds like the most straightforward reason. if you cannot replace the router, faraday the shit out of it. put your own router behind the isp router and don’t forget to change the MAC address of the router (isp will probably block any 3rd party router macs on the network. seen it before)

        • trafficnab@lemm.ee
          link
          fedilink
          English
          arrow-up
          6
          ·
          edit-2
          1 year ago

          That shit would get thrown in a metal cage and treated as a radioactive DMZ network-wise if I was forced to use it

          My ISP is the dumb pipe my internet comes from, it’s bad enough that they inject bandwidth cap warnings into the raw HTML of webpages like some sort of adware virus, they can stay the fuck out of my local network

          • fraksken@infosec.pub
            link
            fedilink
            English
            arrow-up
            3
            ·
            1 year ago

            messing with html sounds very worrying to me. is that on https connections to any site they do not control? Do you have an isp application installed?

            • trafficnab@lemm.ee
              link
              fedilink
              English
              arrow-up
              2
              ·
              1 year ago

              Only HTTP, they intercept any unencrypted page in flight and inject a giant banner at the top that won’t go away until you acknowledge it, no local application required

              This is 100% legal in the US, and in fact, some small regional ISPs actually made money injecting actual ads into webpages, literal spyware

        • empireOfLove@lemmy.one
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          The worst part that ISP’s do these days is have all their hardware broadcast “guest” networks that you can’t disable. They market it as a bonus since any of their own customers using their own apps can connect to any ISP-provided guest network anywhere to save mobile data, but it’s actually just a massive uncontrollable security hole.

      • some_guy@lemmy.sdf.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        When I had Comcast, I had to call them and have them turn this stuff off for me, fwiw.

        I’ve owned a TP-Link that frequently lost all my settings. I’ve owned two Netgears and they’ve been great. I’ve owned two Linksyses and they’ve been great. That’s just my experience.

        • LinkOpensChest.wav@lemmy.oneOP
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 year ago

          I couldn’t even access the Netgear settings without creating a Netgear account, so I returned it. My friend who has a Netgear said this didn’t used to be the case, but I could not bypass that requirement.

      • Wakmrow@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        Yes, get your own router, don’t use the app. If you’re technically inclined, the app will only restrict what you can do with the equipment. And with ISP owned equipment, they have api access to your equipment.

        • LinkOpensChest.wav@lemmy.oneOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          I deleted the app as soon as I got a normal router put in place and my network set up the way I want. I’m not sure why I even thought the app would do what I wanted, but the agent deliberately deceived me.

      • amithinkingright@lemmy.one
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        Fun thought. I’d try wrapping their wifi router in a faraday cage of chicken wire, test that the signal isn’t going out with a nearby smartphone, then plug ethernet from their to my own wifi router.

          • amithinkingright@lemmy.one
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 year ago

            I haven’t tried it but if it chicken wire has enough metal in it, it should work, in principle. I don’t get great reception in my chicken run wrapped in chicken wire, if that makes for a good sign.

            • LinkOpensChest.wav@lemmy.oneOP
              link
              fedilink
              English
              arrow-up
              1
              ·
              1 year ago

              Ah so similar to the metal screen that keeps microwaves from escaping a microwave oven.

              I know people who raise chickens, so maybe I can hit then up for some wire

      • doppelgangmember@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        Fvck it, run your own router on top of that. Make a another local network and just connect it to the ISP Router, then connect all your devices to the new local. Voila.

        Also run a VPN on the new router if you daisy-chain them.

    • dinosaurdynasty@lemmy.world
      link
      fedilink
      English
      arrow-up
      11
      ·
      1 year ago

      You could always do double NAT (put your own router behind theirs) as last resort. It’s not that bad, I’ve done it a lot.

      • Anony Moose@lemmy.ca
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 year ago

        Out of curiosity, if your router is able to connect with their network, why do you then need to add their router back in front of yours?

        • Devion@feddit.nl
          link
          fedilink
          English
          arrow-up
          11
          ·
          1 year ago

          In that case you totally don’t. But many ISPs only allow their own routers/modems or require some very specific abilities from 3rd-party routers usually only found on more high end (expensive) models. So sometimes the last resort is double NATing (which is fine for most users).

      • empireOfLove@lemmy.one
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        yeah, double-NAT tends to break a lot of multiplayer games though so I heavily try to avoid it.

      • Hot Saucerman@lemmy.ml
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        1 year ago

        Do you need NAT if their network supports IPv6 and your whole home network is set up in IPv6?

        • dinosaurdynasty@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          1 year ago

          Probably, unless they have a static delegation or do prefix delegation properly, which if they did they probably don’t suck enough to require double NAT^ lol

          ^single NAT for IPv6, assuming they don’t NAT it themselves

      • Exusgu@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        1 year ago

        If you’re on the techy side and want an all-in-one solution? Sure, if you plan on expanding within their ecosystem later. Unifi’s biggest benefit is the ecosystem, being able to manage everything from one place is nice.

        • Thermal_shocked@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          1 year ago

          I worked on one clients unifi setup and loved it. Immediately got the usg 4 pro, 24 port switch and 3 pro waps. Highly recommend for a prosumer setup.support can be whack, but lots of YouTube and forums. Meraki too pricey for home setup but the support is top tier for critical business.

        • AlexisFR@jlai.lu
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          Yeah I was thinking about the consumer one, which also has a WiFi AP integrated.

      • randombullet@feddit.de
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        It’s good enough.

        I’m running wired routers with their wifi systems. I have a lot of control over my network.

      • flying_mechanic@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        I can’t speak to the all in one dream machine, though I’m sure it’s similar in capability to my UDM pro, which has been fairly solid for me and only really has had trouble when I induced it myself. It’s definitely much more complex and open than most home routers, and allows you to set every single thing you can think of, the drawback though is that it’s not as automated as some home routers and you need to know what you are setting more in depth when you step off the auto modes. Overall I’ve been very happy with my unifi setup. I also use Protect and I’m looking to set up Access too soon(ish).

      • empireOfLove@lemmy.one
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        Of course they have to configure the modem- they have to set it up right to talk to their own hardware. Itd be impossible to use otherwise.

        The point is to insulate your actual LAN settings and router from the ISP so they can’t go fuck with it. This isn’t even a security thing - the ISP can and already is sniffing every packet you send - it’s just trying to maintain some semblance of usable control.

    • tlit341569@discuss.online
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 year ago

      my ISP didn’t gave me the captive portal password and I’m afraid to reset it now because they’ve manually entered the WAN IP 😩